Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

amf — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in amf, with AI-generated Chinese analysis, references, and POCs.

This page serves as a vulnerability aggregation hub for the amf product, covering multiple vendor sources and various weakness types. It is designed to centralize security data regarding this specific software component, ensuring that security professionals and developers can access comprehensive risk information in one location. The collection includes a wide range of vulnerability classes, such as buffer overflows, injection flaws, and configuration errors, spanning from early releases to the most recent updates. This time range allows for a longitudinal analysis of the product's security posture as it evolved over time. Here, users can track vendor advisories to stay informed about patched issues and understand the specific characteristics of common weakness classes affecting the amf architecture. Additionally, the page enables detailed lookups of a product’s vulnerability history, providing context on how certain flaws were discovered, exploited, or mitigated. By aggregating these disparate data points, the resource facilitates deeper insights into the overall security landscape of the amf ecosystem, helping stakeholders assess potential risks and prioritize remediation efforts effectively. The structured presentation of this data supports informed decision-making regarding software maintenance and security auditing processes.

Vendor: free5gc

CVE IDTitleCVSSSeverityPublished
CVE-2026-14624 omec-project amf NGSetupRequest handler.go denial of service CWE-404 4.3 Medium2026-07-04
CVE-2026-14623 omec-project amf NGAP Message RRCInactiveTransitionReport denial of service CWE-404 4.3 Medium2026-07-04
CVE-2026-9301 omec-project amf NGReset Message memory corruption CWE-119 6.3 Medium2026-05-23
CVE-2026-9300 omec-project amf NGSetupRequest memory corruption CWE-119 6.3 Medium2026-05-23
CVE-2026-9299 omec-project amf handler.go PDUSessionResourceModifyIndication memory corruption CWE-119 6.3 Medium2026-05-23
CVE-2026-9298 omec-project amf PathSwitchRequest memory corruption CWE-119 6.3 Medium2026-05-23
CVE-2026-8783 omec-project amf dispatcher.go UERadioCapabilityCheckResponse null pointer dereference CWE-476 4.3 Medium2026-05-18
CVE-2026-8782 omec-project amf NGAP Message handler.go null pointer dereference CWE-476 4.3 Medium2026-05-18
CVE-2026-8781 omec-project amf handler.go RANConfiguration null pointer dereference CWE-476 4.3 Medium2026-05-18
CVE-2026-8780 omec-project amf NGAP Message dispatcher.go memory corruption CWE-119 4.3 Medium2026-05-18
CVE-2026-8779 omec-project amf handler.go NGSetupRequest memory corruption CWE-119 4.3 Medium2026-05-18
CVE-2026-8349 omec-project amf NGAP Message memory corruption CWE-119 4.3 Medium2026-05-11
CVE-2026-41136 free5GC AMF missing default case in Content-Type switch in HTTPUEContextTransfer CWE-440 9.8AICriticalAI2026-04-21
CVE-2025-69248 free5GC has Array Index Out of Bounds in AMF Leading to Denial of Service CWE-129 7.5AIHighAI2026-02-23

All 14 known CVE vulnerabilities affecting amf with full Chinese analysis, references, and POCs where available.