Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
(not in Nixpkgs)
Permalink CVE-2026-41136
updated 3 months ago by @LeSuisse Activity log
  • Created suggestion 3 months ago
  • @LeSuisse dismissed (not in Nixpkgs) 3 months ago
free5GC AMF missing default case in Content-Type switch in HTTPUEContextTransfer

free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Prior to version 1.4.3, the `HTTPUEContextTransfer` handler in `internal/sbi/api_communication.go` does not include a `default` case in the `Content-Type` switch statement. When a request arrives with an unsupported `Content-Type`, the deserialization step is silently skipped, `err` remains `nil`, and the processor is invoked with a completely uninitialized `UeContextTransferRequest` object. Version 1.4.3 contains a fix.

Affected products

amf
  • ==< 1.4.3

Matching in nixpkgs

pkgs.bamf

Application matching framework

pkgs.amfora

Fancy terminal browser for the Gemini protocol

pkgs.cramfsswap

Swap endianess of a cram filesystem (cramfs)

pkgs.amf-headers

Headers for The Advanced Media Framework (AMF)

pkgs.ArchiSteamFarm

Application with primary purpose of idling Steam cards from multiple accounts simultaneously

pkgs.archisteamfarm

Application with primary purpose of idling Steam cards from multiple accounts simultaneously