The vulnerability is an out-of-bounds memory access in the N2 SCTP interface of OpenAirInterface CN5G AMF v2.2.1. An unauthenticated remote attacker can repeatedly establish SCTP associations, triggering improper bounds checking in FD_SET() and causing the AMF process to crash. This crash results in a denial of service that can disrupt network functions controlled by the AMF.

The affected system is the OpenAirInterface CN5G AMF version 2.2.1. No other vendors or product versions are listed in the CVE data.

The impact is a local crash leading to availability loss, but the exploit requires no authentication and can be launched from anywhere that can reach the AMF’s SCTP interface. Based on the description, it is inferred that an attacker could send crafted SCTP packets that trigger the out-of-bounds error. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog, indicating the exploitation risk is currently unknown but could be significant given the ease of access. The likely attack vector is network-based traffic over SCTP.