CVE-2026-8783

omec-project amf dispatcher.go UERadioCapabilityCheckResponse null pointer dereference

CVSS 5.3 MEDIUMEPSS 0.4%CWE-404 CWE-476

A security vulnerability has been detected in omec-project amf up to 2.1.3-dev. This impacts the function UERadioCapabilityCheckResponse of the file ngap/dispatcher.go. Such manipulation leads to null pointer dereference. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.2.0 will fix this issue. Upgrading the affected component is advised. The same pull request fixes multiple security issues.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

omec-project · amf

public PoCs found — 1

cve_referencegithub.com/omec-project/amf/issues/675unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/omec-project/amf/https://github.com/omec-project/amf/issues/675 https://github.com/omec-project/amf/pull/666 https://github.com/omec-project/amf/releases/tag/v2.2.0 https://vuldb.com/submit/811655 https://vuldb.com/vuln/364407 https://vuldb.com/vuln/364407/cti