{"affected":[{"product":"n/a","source":"CNA: mitre","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"cveId":"CVE-2026-117069","cwes":[],"description":"An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) via crafted NAS Registration Requests containing a malformed IMEISV in the 5GS Mobile Identity IE. The Type6NasIe::Validate() function truncates a 32-bit length value to 16 bits, bypassing length validation and causing an out-of-bounds heap read in DecodeImeisv(), which can crash the AMF process.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793645492795,"publishedAt":1793577600000,"references":[{"source":"CNA: mitre","tags":[],"url":"https://github.com/openairinterface/oai-cn5g-amf/issues/16"},{"source":"CNA: mitre","tags":[],"url":"https://gist.github.com/hackeryounow/1c6741be7d536bd98434ac270dbb1f60"}],"remediation":[],"revision":"968a560bb7891cc64de3eb8583d88ab00a4ce27ff31bd856e8f6dde67ed17702","sources":[{"modifiedAt":1793645492795,"name":"CNA: mitre","retrievedAt":1793646538475,"url":"https://www.cve.org/CVERecord?id=CVE-2026-117069"}],"ssvc":null,"status":"published","title":"CVE-2026-117069","updatedAt":1793646538475}