CVE-2026-117067

None

CVSS

—

EPSS

0.2%

Published

Nov 2, 2026

CISA due date

—

The record

An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bounds checking in the FD_SET() operation.

Affected packages

Ecosystem	Package	Introduced	Fixed