CVE-2026-10114CWE-119CWE-787

Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write

Medium · published May 30, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
19.0
In the wild
Unconfirmed
What it is

A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function handle_scp_info in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. This manipulation causes out-of-bounds write. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. To fix this issue, it is recommended to deploy a patch.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00276 · 19.0th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-787 · Out-of-bounds Write
Published
2026-05-30T10:00Z
EPSS history
Timeline
  • 30 MAY 10:00Z
    Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write
    cvelistv5