CVE-2026-100892 aligungr UERANSIM nr-gnb handler.cpp ULInformationTransfer memory corruption
Remote attackers can trigger memory corruption in UERANSIM nr-gnb via crafted NAS messages, potentially leading to code execution or service disruption.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-100892?
CVE-2026-100892 is a medium-severity memory corruption vulnerability in aligungr UERANSIM, published on 28 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.cpp of the component nr-gnb. Performing a manipulation of the argument dedicatedNASMessage results in memory corruption. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Weakness: CWE-119
Which versions are affected by CVE-2026-100892?
How do I fix CVE-2026-100892?
No fix has been published for CVE-2026-100892 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-100892 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-100892 exists.
Sources
Also known as GHSA-mqvr-mhj9-rgx9.