CVE-2026-8783
omec-project amf dispatcher.go UERadioCapabilityCheckResponse null pointer dereference
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
14th
A security vulnerability has been detected in omec-project amf up to 2.1.3-dev. This impacts the function UERadioCapabilityCheckResponse of the file ngap/dispatcher.go. Such manipulation leads to null pointer dereference. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.2.0 will fix this issue. Upgrading the affected component is advised. The same pull request fixes multiple security issues.
| CWE | CWE-476 CWE-404 |
| Vendor | omec-project |
| Product | amf |
| Published | May 18, 2026 |
| Last Updated | May 18, 2026 |
Stay Ahead of the Next One
Get instant alerts for omec-project amf
Be the first to know when new medium vulnerabilities affecting omec-project amf are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
omec-project / amf
2.1.3-dev
References
vuldb.com: https://vuldb.com/vuln/364407 vuldb.com: https://vuldb.com/vuln/364407/cti vuldb.com: https://vuldb.com/submit/811655 github.com: https://github.com/omec-project/amf/issues/675 github.com: https://github.com/omec-project/amf/pull/666 github.com: https://github.com/omec-project/amf/releases/tag/v2.2.0 github.com: https://github.com/omec-project/amf/
Credits
🔍 shovon0203 (VulDB User) VulDB CNA Team