CVE-2026-2522CWE-119

Open5GS MME esm-build.c memory corruption

Medium · published February 15, 2026

CVSS v4.0
6.9
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is an unknown function of the file /src/mme/esm-build.c of the component MME. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00636 · 49.9th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2026-02-15T23:32Z
EPSS history
Timeline
  • 15 FEB 23:32Z
    Open5GS MME esm-build.c memory corruption
    cvelistv5