CVE-2026-100892
MediumCVSS 5.3Summary
A memory corruption vulnerability was found in UERANSIM up to 3.3.0 in the ULInformationTransfer function. Manipulating the dedicatedNASMessage argument leads to memory corruption. The attack can be initiated remotely and the exploit is public.
Risk Assessment
Memory corruption can lead to system crashes or remote code execution. The public exploit increases the risk of exploitation.
Recommendation
Update UERANSIM to the latest version if available, or apply available patches. Monitor security advisories from the vendor.
Other vulnerabilities in UERANSIM
See all- CVE-2026-101035Medium
A flaw in UERANSIM up to 3.3.0 affects the DecodePlainMmMessage function in the library src/lib/nas/encode.cpp of the nr-gnb component. Executing a manipulation leads to an uncaught exception. The attack can be launched remotely, and the exploit has been published.
- CVE-2026-7183Medium
Vulnerability in aligungr UERANSIM up to version 3.2.7. The function rls::DecodeRlsMessage in the library src/lib/rls/rls_pdu.cpp of the Radio Link Simulation Layer component leads to an uncaught exception when manipulating the pduLength argument. The attack may be initiated remotely. Fixed in version 3.2.8.
Original NVD description (English source)
A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.cpp of the component nr-gnb. Performing a manipulation of the argument dedicatedNASMessage results in memory corruption. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS