CVE-2026-10114 - Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write

Back Back to CVE browser

MEDIUM

Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write

Published May 30, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.28%

Description

A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function handle_scp_info in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. This manipulation causes out-of-bounds write. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. To fix this issue, it is recommended to deploy a patch.

Affected products

Vendor Open5gs Product Open5GS Default
n/a
- Version
  2.7.0
  Status
  affected
  Constraints
  -
- Version
  2.7.1
  Status
  affected
  Constraints
  -
- Version
  2.7.2
  Status
  affected
  Constraints
  -
- Version
  2.7.3
  Status
  affected
  Constraints
  -
- Version
  2.7.4
  Status
  affected
  Constraints
  -
- Version
  2.7.5
  Status
  affected
  Constraints
  -
- Version
  2.7.6
  Status
  affected
  Constraints
  -
- Version
  2.7.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Open5gs

Open5GS

n/a

Version	Status	Constraints
2.7.0	affected	-
2.7.1	affected	-
2.7.2	affected	-
2.7.3	affected	-
2.7.4	affected	-
2.7.5	affected	-
2.7.6	affected	-
2.7.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-787

Out-of-bounds Write

References (5)

https://github.com/open5gs/open5gs/
product
https://github.com/open5gs/open5gs/issues/4468
exploitissue-tracking
https://vuldb.com/submit/818582
third-party-advisory
https://vuldb.com/vuln/367292
vdb-entrytechnical-description
https://vuldb.com/vuln/367292/cti
signaturepermissions-required

Link	Providers	Tags
https://github.com/open5gs/open5gs/		product
https://github.com/open5gs/open5gs/issues/4468		exploitissue-tracking
https://vuldb.com/submit/818582		third-party-advisory
https://vuldb.com/vuln/367292		vdb-entrytechnical-description
https://vuldb.com/vuln/367292/cti		signaturepermissions-required