CVE-2026-9301: omec-project amf NGReset Message memory corruption

Severity: medium (CVSS 6.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-23 · updated 2026-07-23
Weakness: CWE-119

Description

A vulnerability was found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGReset Message Handler. Performing a manipulation results in memory corruption. The attack is possible to be carried out remotely. The exploit has been made public and could be used. It is recommended to apply a patch to fix this issue.

Affected products

omec-project amf: 2.1.0, 2.1.1

References

https://github.com/omec-project/amf/
https://github.com/omec-project/amf/issues/678
https://github.com/omec-project/amf/pull/666
https://vuldb.com/submit/811842
https://vuldb.com/vuln/365248
https://vuldb.com/vuln/365248/cti

Get alerted when CVE-2026-9301 or the next vulnerability affects your stack