Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3x4g-259h-5p7c

Опубликовано: 18 мая 2026
Источник: github
Github: Прошло ревью
CVSS4: 2.1
CVSS3: 4.3

Описание

AMF Improperly Restricts Operations within the Bounds of a Memory Buffer

A vulnerability was identified in omec-project amf up to 2.1.3-dev. The affected element is an unknown function of the file ngap/dispatcher.go of the component NGAP Message Handler. The manipulation leads to memory corruption. The attack may be initiated remotely. The exploit is publicly available and might be used. Upgrading to version 2.2.0 is sufficient to fix this issue. It is suggested to upgrade the affected component. The same pull request fixes multiple security issues.

Пакеты

Наименование

github.com/omec-project/amf

go
Затронутые версииВерсия исправления

< 2.2.0

2.2.0

EPSS

Процентиль: 23%
0.00303
Низкий

2.1 Low

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 4.3
nvd
3 месяца назад

A vulnerability was identified in omec-project amf up to 2.1.3-dev. The affected element is an unknown function of the file ngap/dispatcher.go of the component NGAP Message Handler. The manipulation leads to memory corruption. The attack may be initiated remotely. The exploit is publicly available and might be used. Upgrading to version 2.2.0 is sufficient to fix this issue. It is suggested to upgrade the affected component. The same pull request fixes multiple security issues.

EPSS

Процентиль: 23%
0.00303
Низкий

2.1 Low

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-119