Threats tagged 'ghsa-xg9f-qw22-p2qc'

An integer truncation vulnerability exists in the NAS decoder of OpenAirInterface CN5G AMF version 2.2.1. This flaw allows an unauthenticated remote attacker to cause a denial of service by sending crafted NAS Registration Requests with a malformed IMEISV in the 5GS Mobile Identity IE. The vulnerability arises because the Type6NasIe::Validate() function truncates a 32-bit length value to 16 bits, bypassing length validation and leading to an out-of-bounds heap read in DecodeImeisv(), which crashes the AMF process.