CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages.

• CWE-400
• CWE-400

• https://github.com/free5gc/free5gc/issues/198Exploit, Issue Tracking, Third Party Advisory
• https://github.com/free5gc/free5gc/issues/198Exploit, Issue Tracking, Third Party Advisory

Published

Nov 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-38865Certain The MPlayer Project products are vulnerable to Divid…5.5
• CVE-2022-38866Certain The MPlayer Project products are vulnerable to Buffe…5.5
• CVE-2022-38867SQL Injection vulnerability in rttys versions 4.0.0, 4.0.1, …8.8
• CVE-2022-38868SQL Injection vulnerability in Ehoney version 2.0.0 in model…7.2
• CVE-2022-3887Use after free in Web Workers in Google Chrome prior to 107.…8.8
• CVE-2022-38870Free5gc v3.2.1 is vulnerable to Information disclosure.7.5
• CVE-2022-38873D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.…7.5
• CVE-2022-38877Garage Management System v1.0 is vulnerable to Arbitrary cod…7.2
• CVE-2022-38878School Activity Updates with SMS Notification v1.0 is vulner…7.2
• CVE-2022-3888Use after free in WebCodecs in Google Chrome prior to 107.0.…8.8
• CVE-2022-38880The d8s-urls for python, as distributed on PyPI, included a …9.8
• CVE-2022-38881The d8s-archives for python, as distributed on PyPI, include…9.8