CVE-2025-65805

High · 7.5

CVSS

7.5

EPSS

0.4%

Published

Jan 7, 2026

CISA due date

—

The record

OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote attackers can launch a denial-of-service attack and potentially execute malicious code by accessing port N1 and sending an imsi string longer than 1000 to AMF.

Affected packages

Ecosystem	Package	Introduced	Fixed