Loading market data...
← Back to CVE feed

CVE-2026-100892

MEDIUM CVSS 5.3 View on NVD ↗

Description

A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.cpp of the component nr-gnb. Performing a manipulation of the argument dedicatedNASMessage results in memory corruption. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published: Sep 28, 2026 01:16 UTC Modified: Sep 28, 2026 15:16 UTC