{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aopenairinterfacecore_network2.2.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:openairinterface:core_network:2.2.1:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-106808"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenAirInterface Core Network (v2.2.1)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["OpenAirInterface"],"content_html":"\u003cp\u003eA stack-based buffer overflow vulnerability exists in OpenAirInterface (OAI) Core Network v2.2.1 within the Nudm_UEAU Generate Authentication Data endpoint. The UDM fails to validate the size of \u003ccode\u003eresynchronizationInfo.rand\u003c/code\u003e and \u003ccode\u003eauts\u003c/code\u003e values when passed to \u003ccode\u003econv::hex_str_to_uint8()\u003c/code\u003e. An unauthenticated attacker with access to the SBI interface and a valid SUPI can provide an oversized value to overwrite adjacent stack memory and the stack canary, causing the UDM process to terminate.\u003c/p\u003e\n","date_modified":"2026-11-02T19:49:26Z","date_published":"2026-11-02T19:49:26Z","id":"https://feed.craftedsignal.io/briefs/2026-11-02-openairinterface-udm-overflow/","summary":"OpenAirInterface Core Network v2.2.1 contains a stack-based buffer overflow in the Nudm_UEAU Generate Authentication Data endpoint, allowing an unauthenticated attacker to terminate the UDM process.","title":"OpenAirInterface Core Network: Stack-based buffer overflow in UDM (CVE-2026-106808)","url":"https://feed.craftedsignal.io/briefs/2026-11-02-openairinterface-udm-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:openairinterface:core_network:2.2.1:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}