The vulnerability is a buffer overflow in the NGReset Message Handler of omec‑project amf. By manipulating the NGReset message, an attacker can trigger a write beyond the allocated bounds, corrupting adjacent memory. This memory corruption could potentially result in remote code execution or other unexpected behavior, depending on how the corrupted memory is used. The flaw is identified as CWE‑119 – Incorrect Restriction of Operations Within the Bounds of a Buffer.

The defect affects omec‑project amf releases up to and including version 2.1.1. Any system running an affected release should verify its version and update accordingly.

The CVSS score of 5.3 indicates a moderate severity, and the EPSS score is currently unavailable. The vulnerability is not listed in CISA KEV. The description states that the attack can be carried out remotely and that a public exploit is available, implying that the most likely attack vector is the NGReset interface exposed over the network.