PULSE
FEED
← All CVEs
CVE WatchNov 2, 2026

CVE-2026-117067

An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated re

CVSS

—

No CVSS

EPSS

0.2%

p11

KEV

—

Exploit Today

3

0-100

Published: Nov 2, 2026 · Last modified: Nov 2, 2026

EPSS · 30d
0.2%EPSS · 30 days0.2%
2026-11-032026-11-07
Technical description

An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bounds checking in the FD_SET() operation.

Official references
Related CVEs

No related CVEs by CWE or product.