OMEC Project AMF Memory Corruption Vulnerability in PathSwitchRequest Handler

A memory corruption vulnerability has been identified in the OMEC Project AMF component, specifically in versions through 2.1.1. The issue arises in the PathSwitchRequest Handler, where an invalid User Equipment (UE) context can be sent, leading to a crash of the AMF. This vulnerability can be exploited remotely, and the exploit is now public.

Impact

Exploitation of this vulnerability causes a segmentation fault, crashing the AMF service. The log indicates that the crash occurs due to a nil pointer dereference, which is a common type of memory corruption error.

Reproduction

To reproduce this vulnerability, send a PathSwitchRequest NGAP packet without a valid UE context. The AMF will crash upon processing the malformed request.

Remediation

Users are advised to update to OMEC Project AMF version 2.2.1, which addresses this vulnerability.