OpenAirInterface Core Network: Stack-based buffer overflow in UDM (CVE-2026-106808)
OpenAirInterface Core Network v2.2.1 contains a stack-based buffer overflow in the Nudm_UEAU Generate Authentication Data endpoint, allowing an unauthenticated attacker to terminate the UDM process.
CVE search metadata
CVE search record: CVE-2026-106808. Severity: high. CVSS: 7.5. KEV: no. Product: OpenAirInterface Core Network (v2.2.1). Brief: OpenAirInterface Core Network: Stack-based buffer overflow in UDM (CVE-2026-106808). Brief link: https://feed.craftedsignal.io/briefs/2026-11-02-openairinterface-udm-overflow/
Triage facts
Revision 1- Applicability
- OpenAirInterface Core Network (v2.2.1)
- Evidence
- Unknown
- Severity
- Low
- Sources
- 1 public source
- Freshness
- Revision 1Nov 2, 19:49 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A stack-based buffer overflow vulnerability exists in OpenAirInterface (OAI) Core Network v2.2.1 within the Nudm_UEAU Generate Authentication Data endpoint. The UDM fails to validate the size of resynchronizationInfo.rand and auts values when passed to conv::hex_str_to_uint8(). An unauthenticated attacker with access to the SBI interface and a valid SUPI can provide an oversized value to overwrite adjacent stack memory and the stack canary, causing the UDM process to terminate.