Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-10156 EUVD-2026-33472GHSA-5fc4-7q74-93x4

Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption

Published May 30, 2026 · Updated Jun 1, 2026 · Assigned by VulDB

Description

A vulnerability was determined in Open5GS up to 2.7.7. This affects the function handle_amf_info in the library /lib/sbi/nnrf-handler.c of the component nf-instances Endpoint. Executing a manipulation of the argument nf_info_pool can lead to resource consumption. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Applying a patch is advised to resolve this issue. The issue report is flagged as already-fixed.

Affected products

VendorProductAffectedFixed
— Open5GS 2.7.0, 2.7.1, 2.7.2, 2.7.3, 2.7.4, 2.7.5, 2.7.6, 2.7.7 —

References