Heap Out-of-Bounds Write Vulnerability in Open5GS from Open5GS

CVE-2026-116543

What is CVE-2026-116543?

Open5GS versions 1.3.0 to 2.8.0 are affected by a heap out-of-bounds write vulnerability in the parse_multipart() function. This flaw enables unauthenticated attackers to exploit the system by supplying a malformed multipart boundary, which can lead to memory corruption. Specifically, a crafted multipart/related request sent to the SBI interface may overflow a lookbehind buffer, potentially causing system crashes and instability.

References