Approved changes feed: RSS · Atom
cpe:2.3:a:omec-project:amf:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Omec Project (5c7f8cf3-643d-5dac-bb00-393929488e78) |
|---|---|
| Product | Amf (a9b3d51a-6799-505e-98c9-3c29ee980ca6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14624 |
vulnerable | 2026-07-29 00:26:17.153547 |
omec-project amf NGSetupRequest handler.go denial of service
MEDIUM (4.3)
A vulnerability was identified in omec-project amf up to 2.0.2/2.1.1. Impacted is an unknown function of the file /go/src/amf/ngap/handler.go of the component NGSetupRequest Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The identifier of the patch is 34bc6724acc97dba1f8691e586da95b042cb612d. To fix this issue, it is recommended to deploy a patch.
Published: 2026-07-04T10:15:10.107Z
Updated: 2026-07-06T19:38:41.857Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14623 |
vulnerable | 2026-07-29 00:26:17.153335 |
omec-project amf NGAP Message RRCInactiveTransitionReport denial of service
MEDIUM (4.3)
A vulnerability was determined in omec-project amf up to 2.1.1. This issue affects the function RRCInactiveTransitionReport of the component NGAP Message Handler. Executing a manipulation can lead to denial of service. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 34bc6724acc97dba1f8691e586da95b042cb612d. A patch should be applied to remediate this issue.
Published: 2026-07-04T09:45:10.403Z
Updated: 2026-07-06T15:01:50.499Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9301 |
vulnerable | 2026-06-08 08:08:58.896957 |
omec-project amf NGReset Message memory corruption
MEDIUM (6.3)
A vulnerability was found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGReset Message Handler. Performing a manipulation results in memory corruption. The attack is possible to be carried out remotely. The exploit has been made public and could be used. It is recommended to apply a patch to fix this issue.
Published: 2026-05-23T13:00:15.365Z
Updated: 2026-05-27T17:28:27.090Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9300 |
vulnerable | 2026-06-08 08:08:58.896747 |
omec-project amf NGSetupRequest memory corruption
MEDIUM (6.3)
A vulnerability has been found in omec-project amf up to 2.1.1. This affects an unknown part of the component NGSetupRequest Handler. Such manipulation leads to memory corruption. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. It is best practice to apply a patch to resolve this issue.
Published: 2026-05-23T11:45:12.057Z
Updated: 2026-05-26T13:21:23.187Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9299 |
vulnerable | 2026-06-08 08:08:58.896533 |
omec-project amf handler.go PDUSessionResourceModifyIndication memory corruption
MEDIUM (6.3)
A flaw has been found in omec-project amf up to 2.1.1. Affected by this issue is the function PDUSessionResourceModifyIndication of the file /go/src/amf/ngap/handler.go. This manipulation causes memory corruption. Remote exploitation of the attack is possible. The exploit has been published and may be used. Applying a patch is the recommended action to fix this issue.
Published: 2026-05-23T11:00:14.603Z
Updated: 2026-05-27T13:48:42.424Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9298 |
vulnerable | 2026-06-08 08:08:58.896305 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8783 |
vulnerable | 2026-06-08 08:08:58.632553 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8782 |
vulnerable | 2026-06-08 08:08:58.632167 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8781 |
vulnerable | 2026-06-08 08:08:58.631802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8780 |
vulnerable | 2026-06-08 08:08:58.631421 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8779 |
vulnerable | 2026-06-08 08:08:58.631012 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8349 |
vulnerable | 2026-06-08 08:08:58.305985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.