CVE-2026-100892 | aligungr UERANSIM up to 3.3.0 nr-gnb src/gnb/rrc/handler.cpp ULInformationTransfer dedicatedNASMessage memory corruption

A vulnerability marked as problematic has been reported in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.cpp of the component nr-gnb. Performing a manipulation of the argument dedicatedNASMessage results in memory corruption.

This vulnerability is identified as CVE-2026-100892. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More