CVE-2026-30075

OpenAirInterface Version 2.2.0 contains a buffer overflow vulnerability in the UplinkNASTransport message handling mechanism. When processing Authentication Response messages with oversized NAS Protocol Data Units (PDUs), the AUSF component fails to properly validate input length and crashes during verification, directly impacting 5G core network authentication infrastructure. This vulnerability enables remote attackers to trigger denial of service conditions that prevent legitimate users from completing registration and verification procedures. The vulnerability presents a HIGH severity risk with a CVSS score of 7.5, featuring network-based attack vector, low attack complexity, and no authentication requirements. The impact is limited to availability, with no confidentiality or integrity compromise, though the DoS effect on authentication services creates significant operational disruption to affected networks. The accessibility of exploitation is noteworthy given the absence of prerequisites. There is no evidence of active exploitation in the wild, and the vulnerability does not appear on the CISA Known Exploited Vulnerabilities catalog. The EPSS score of 0.0008 indicates minimal probability of future exploitation attempts relative to other CVEs. Community attention remains low, and the vulnerability is classified as inactive on security tracking platforms, suggesting limited visibility or organizational awareness within the security community at this time.