A memory corruption vulnerability involving buffer overflow (CWE-119) and out-of-bounds write (CWE-787) was identified in the PathSwitchRequest Handler of omec-project amf, affecting versions up to 2.1.1. Manipulating the unknown functionality can overwrite memory, potentially disrupting program operation or enabling further compromise. The description notes that the defect can be exploited remotely, and the exploit is publicly available.

The affected product is omec-project amf, all releases up to and including 2.1.1. No other vendors or product variants are listed as impacted.

The CVSS score of 5.3 indicates a medium severity vulnerability. EPSS score of 0.046% indicates a low probability of exploitation, and the issue is not listed in CISA’s KEV catalog, but the public availability of the exploit and the remote attack vector raise concern. An attacker can remotely trigger the handler via crafted input, causing memory corruption that may influence program execution or lead to denial of service.