Description
A vulnerability has been found in omec-project amf up to 2.1.1. This affects an unknown part of the component NGSetupRequest Handler. Such manipulation leads to memory corruption. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. It is best practice to apply a patch to resolve this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| omec-project | amf | 2.1.0, 2.1.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 | openSUSE-SU-2026:21483-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/omec-project/amf | < 1.7.1-0.20260421213846-34bc6724acc9 | 1.7.1-0.20260421213846-34bc6724acc9 | GHSA-6p7m-c3mw-4gmw |
Advisories 1
- openSUSE-SU-2026:21483-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Jul 31, 2026
References
- VDB-365247 | omec-project amf NGSetupRequest memory corruption vdb-entry
- VDB-365247 | CTI Indicators (IOB, IOC) signature permissions-required
- Submit #811841 | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption third-party-advisory
- https://github.com/omec-project/amf/issues/679 exploit issue-tracking
- https://github.com/omec-project/amf/pull/666 issue-tracking patch
- https://github.com/omec-project/amf/ product