Open5GS (1.3.0 Through 2.8.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/open5gs-1.3.0-through-2.8.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 17:44:50 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgOpen5GS: Heap out-of-bounds write in parse_multipart (CVE-2026-116543)https://feed.craftedsignal.io/briefs/2026-10-open5gs-heap-oob-write/Mon, 26 Oct 2026 17:44:50 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-open5gs-heap-oob-write/Open5GS versions 1.3.0 through 2.8.0 contain a heap out-of-bounds write vulnerability in the parse_multipart() function, allowing unauthenticated attackers to corrupt memory and crash network functions.<p>A heap out-of-bounds write vulnerability exists in the parse_multipart() function of Open5GS versions 1.3.0 through 2.8.0. Unauthenticated attackers can exploit this by sending a crafted multipart/related request to the SBI interface of any network function. This triggers an overflow of the lookbehind buffer, resulting in memory corruption and a crash of the affected network function.</p> lowadvisory