CVE-2026-10114

4.3 MEDIUM

A vulnerability was determined in Open5GS up to 2.7.7

Published: 2026-05-30 · Last updated: 2026-06-02

Severity and scoring

CVSS: 4.3 MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE: CWE-119, CWE-787

Description

A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function handle_scp_info in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. This manipulation causes out-of-bounds write. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. To fix this issue, it is recommended to deploy a patch.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2026-10114
[Other]https://github.com/open5gs/open5gs/
[Other]https://github.com/open5gs/open5gs/issues/4468
[Other]https://vuldb.com/submit/818582
[Other]https://vuldb.com/vuln/367292
[Other]https://vuldb.com/vuln/367292/cti
[Other]https://github.com/open5gs/open5gs/issues/4468

Related CVEs

Same CWE

CVE-2026-8358 — LibreOffice Calc can import tracked changes from a spreadsheet document
CVE-2026-8357 — LibreOffice Calc compiles cell formulas when opening a spreadsheet
CVE-2026-8356 — LibreOffice can import presentations in the legacy binary PPT format
CVE-2026-6047 — LibreOffice can import documents in the OOXML format (DOCX)
CVE-2026-6045 — LibreOffice can import EMF+ graphics, which may be embedded in documents