CVE-2026-9299 | omec-project amf up to 2.1.1 handler.go PDUSessionResourceModifyIndication memory corruption (Issue 681)

A vulnerability classified as critical has been found in omec-project amf up to 2.1.1. Affected by this issue is the function PDUSessionResourceModifyIndication of the file /go/src/amf/ngap/handler.go. This manipulation causes memory corruption.

This vulnerability is registered as CVE-2026-9299. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Applying a patch is the recommended action to fix this issue.