GitHub Advisoryadvisory · Go
GHSA-6v92-ph9p-hrpc AMF Vulnerable to Improper Resource Shutdown or Release
LOW
Official page ↗
- Aliases
- CVE-2026-8783
- Ecosystem
- Go
- Packages
- github.com/omec-project/amf
- Severity
- Low
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- Weaknesses
- CWE-404
- Reviewed
- 2026-05-28
Affected packages
• Go github.com/omec-project/amf: < 2.2.0 → fixed in 2.2.0
Description
A security vulnerability has been detected in omec-project amf up to 2.1.3-dev. This impacts the function UERadioCapabilityCheckResponse of the file ngap/dispatcher.go. Such manipulation leads to null pointer dereference. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.2.0 will fix this issue. Upgrading the affected component is advised. The same pull request fixes multiple security issues.
Related
Alias · CVE (1)
- CVE-2026-8783 A security vulnerability has been detected in omec-project amf up to 2.1.3-dev. vulnerability
Weakness · CWE (1)
- CWE-404 Improper Resource Shutdown or Release weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-8783 advisory
- https://github.com/omec-project/amf/issues/675 web
- https://github.com/omec-project/amf/pull/666 web
- https://github.com/omec-project/amf package
- https://github.com/omec-project/amf/releases/tag/v2.2.0 web
- https://vuldb.com/submit/811655 web
- https://vuldb.com/vuln/364407 web
- https://vuldb.com/vuln/364407/cti web