CVE-2026-101035
MediumCVSS 5.3Summary
A flaw in UERANSIM up to 3.3.0 affects the DecodePlainMmMessage function in the library src/lib/nas/encode.cpp of the nr-gnb component. Executing a manipulation leads to an uncaught exception. The attack can be launched remotely, and the exploit has been published.
Risk Assessment
A remote attacker may cause a crash or unexpected behavior of the nr-gnb component, potentially leading to disruption of network services.
Recommendation
Apply the patch with identifier 1ae9bf2062b57595dbcbc4bc1d0a0ccf06815bac or update UERANSIM to a patched version.
Other vulnerabilities in UERANSIM
See all- CVE-2026-100892Medium
A memory corruption vulnerability was found in UERANSIM up to 3.3.0 in the ULInformationTransfer function. Manipulating the dedicatedNASMessage argument leads to memory corruption. The attack can be initiated remotely and the exploit is public.
- CVE-2026-7183Medium
Vulnerability in aligungr UERANSIM up to version 3.2.7. The function rls::DecodeRlsMessage in the library src/lib/rls/rls_pdu.cpp of the Radio Link Simulation Layer component leads to an uncaught exception when manipulating the pduLength argument. The attack may be initiated remotely. Fixed in version 3.2.8.
Original NVD description (English source)
A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and may be used. This patch is called 1ae9bf2062b57595dbcbc4bc1d0a0ccf06815bac. It is best practice to apply a patch to resolve this issue.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS