OpenAirInterface - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/openairinterface/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 02 Nov 2026 19:49:26 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgOpenAirInterface Core Network: Stack-based buffer overflow in UDM (CVE-2026-106808)https://feed.craftedsignal.io/briefs/2026-11-02-openairinterface-udm-overflow/Mon, 02 Nov 2026 19:49:26 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-02-openairinterface-udm-overflow/OpenAirInterface Core Network v2.2.1 contains a stack-based buffer overflow in the Nudm_UEAU Generate Authentication Data endpoint, allowing an unauthenticated attacker to terminate the UDM process.A stack-based buffer overflow vulnerability exists in OpenAirInterface (OAI) Core Network v2.2.1 within the Nudm_UEAU Generate Authentication Data endpoint. The UDM fails to validate the size of resynchronizationInfo.rand and auts values when passed to conv::hex_str_to_uint8(). An unauthenticated attacker with access to the SBI interface and a valid SUPI can provide an oversized value to overwrite adjacent stack memory and the stack canary, causing the UDM process to terminate.

]]>lowadvisory