What’s Vulnerable › Vulnerabilities

CVE-2026-8780: omec-project amf NGAP Message dispatcher.go memory corruption

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-18 · updated 2026-10-26
• Weakness: CWE-119

Description

A vulnerability was identified in omec-project amf up to 2.1.3-dev. The affected element is an unknown function of the file ngap/dispatcher.go of the component NGAP Message Handler. The manipulation leads to memory corruption. The attack may be initiated remotely. The exploit is publicly available and might be used. Upgrading to version 2.2.0 is sufficient to fix this issue. It is suggested to upgrade the affected component. The same pull request fixes multiple security issues.

Affected products

• omec-project amf: 2.1.3-dev

References

• https://github.com/omec-project/amf/
• https://github.com/omec-project/amf/issues/670
• https://github.com/omec-project/amf/pull/666
• https://github.com/omec-project/amf/releases/tag/v2.2.0
• https://vuldb.com/submit/811617
• https://vuldb.com/vuln/364404
• https://vuldb.com/vuln/364404/cti

Get alerted when CVE-2026-8780 or the next vulnerability affects your stack