What’s Vulnerable › Vulnerabilities

CVE-2026-9299: omec-project amf handler.go PDUSessionResourceModifyIndication memory corruption

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-23 · updated 2026-07-23
• Weakness: CWE-119

Description

A flaw has been found in omec-project amf up to 2.1.1. Affected by this issue is the function PDUSessionResourceModifyIndication of the file /go/src/amf/ngap/handler.go. This manipulation causes memory corruption. Remote exploitation of the attack is possible. The exploit has been published and may be used. Applying a patch is the recommended action to fix this issue.

Affected products

• omec-project amf: 2.1.0, 2.1.1

References

• https://github.com/omec-project/amf/
• https://github.com/omec-project/amf/issues/681
• https://github.com/omec-project/amf/pull/666
• https://vuldb.com/submit/811829
• https://vuldb.com/vuln/365246
• https://vuldb.com/vuln/365246/cti

Get alerted when CVE-2026-9299 or the next vulnerability affects your stack