open5gs Vulnerability Advisory Catalog

Total 154 security vulnerabilities recorded for open5gs software and firmware.

← Back to All Vendors
Component: open5gs

Open5GS v2.7.5, prior to commit 67ba7f92bbd7a378954895d96d9d7b05d5b64615, is vulnerable to a NULL pointer dereference when a multipart/related HTTP PO...

📅 2025-09-17
CVSS 4.0 Dossier →
Component: open5gs

An issue in Open5GS v2.7.2 and before allows a remote attacker to cause a denial of service via a crafted Create Session Request message to the SMF (P...

📅 2025-09-09
CVSS 7.5 Dossier →
Component: open5gs

Assertion failure in function ngap_build_downlink_nas_transport in file src/amf/ngap-build.c, the Access and Mobility Management Function (AMF) compon...

📅 2025-09-08
CVSS 7.5 Dossier →
CVE-2025-9405 MEDIUM
Component: open5gs

A security flaw has been discovered in Open5GS up to 2.7.5. The impacted element is the function gmm_state_exception of the file src/amf/gmm-sm.c. The...

📅 2025-08-25
CVSS 5.3 Dossier →
CVE-2025-8805 MEDIUM
Component: open5gs

A vulnerability was determined in Open5GS up to 2.7.5. Affected by this issue is the function smf_gsm_state_wait_pfcp_deletion of the file src/smf/gsm...

📅 2025-08-10
CVSS 5.3 Dossier →
CVE-2025-8804 MEDIUM
Component: open5gs

A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ngap_build_downlink_nas_transport of the component AM...

📅 2025-08-10
CVSS 5.3 Dossier →
CVE-2025-8803 MEDIUM
Component: open5gs

A vulnerability has been found in Open5GS up to 2.7.5. Affected is the function gmm_state_de_registered/gmm_state_exception of the file src/amf/gmm-sm...

📅 2025-08-10
CVSS 5.3 Dossier →
CVE-2025-8802 MEDIUM
Component: open5gs

A vulnerability was determined in Open5GS up to 2.7.5. This vulnerability affects the function smf_state_operational of the file src/smf/smf-sm.c of t...

📅 2025-08-10
CVSS 5.3 Dossier →
CVE-2025-8801 MEDIUM
Component: open5gs

A vulnerability was found in Open5GS up to 2.7.5. This affects the function gmm_state_exception of the file src/amf/gmm-sm.c of the component AMF. The...

📅 2025-08-10
CVSS 5.3 Dossier →
CVE-2025-8800 MEDIUM
Component: open5gs

A vulnerability has been found in Open5GS up to 2.7.5. Affected by this issue is the function esm_handle_pdn_connectivity_request of the file src/mme/...

📅 2025-08-10
CVSS 5.3 Dossier →
CVE-2025-8799 MEDIUM
Component: open5gs

A vulnerability was identified in Open5GS up to 2.7.5. Affected by this vulnerability is the function amf_npcf_am_policy_control_build_create/amf_nsmf...

📅 2025-08-10
CVSS 5.3 Dossier →
Component: open5gs

A vulnerability was found in Open5GS up to 2.7.5. It has been classified as problematic. Affected is the function amf_nsmf_pdusession_handle_release_s...

📅 2025-08-07
CVSS 3.3 Dossier →
Component: open5gs

A vulnerability classified as problematic was found in Open5GS up to 2.7.3. Affected by this vulnerability is the function ngap_recv_handler/s1ap_recv...

📅 2025-07-12
CVSS 3.3 Dossier →
Component: open5gs

A vulnerability, which was classified as problematic, has been found in Open5GS up to 2.7.5. This issue affects the function amf_state_operational of ...

📅 2025-07-01
CVSS 3.3 Dossier →
Component: open5gs

An issue in upf in open5gs 2.7.2 and earlier allows a remote attacker to cause a Denial of Service via a crafted PFCP SessionEstablishmentRequest pack...

📅 2025-06-18
CVSS 7.1 Dossier →
Component: open5gs

A missing length check in `ogs_pfcp_subnet_add` function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local atta...

📅 2025-06-18
CVSS 7.8 Dossier →
Component: open5gs

A missing length check in `ogs_pfcp_dev_add` function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local attacke...

📅 2025-06-18
CVSS 7.1 Dossier →
CVE-2025-5935 MEDIUM
Component: open5gs

A vulnerability was found in Open5GS up to 2.7.3. It has been declared as problematic. Affected by this vulnerability is the function common_register_...

📅 2025-06-10
CVSS 5.3 Dossier →
CVE-2025-5520 MEDIUM
Component: open5gs

A vulnerability was found in Open5GS up to 2.7.3. It has been classified as problematic. Affected is the function gmm_state_authentication/emm_state_a...

📅 2025-06-03
CVSS 5.3 Dossier →
CVE-2025-5501 MEDIUM
Component: open5gs

A vulnerability classified as problematic was found in Open5GS up to 2.7.3. Affected by this vulnerability is the function ngap_handle_path_switch_req...

📅 2025-06-03
CVSS 5.3 Dossier →
Component: open5gs

An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation. When processing ...

📅 2025-04-22
CVSS 7.5 Dossier →
Component: open5gs

An issue was discovered in Open5GS v2.7.2. When a UE switches between two gNBs and sends a handover request at a specific time, it may cause an except...

📅 2025-03-12
CVSS 6.5 Dossier →
CVE-2025-1925 MEDIUM
Component: open5gs

A vulnerability classified as problematic was found in Open5GS up to 2.7.2. Affected by this vulnerability is the function amf_nsmf_pdusession_handle_...

📅 2025-03-04
CVSS 5.3 Dossier →
CVE-2025-1893 MEDIUM
Component: open5gs

A vulnerability was found in Open5GS up to 2.7.2. It has been declared as problematic. Affected by this vulnerability is the function gmm_state_authen...

📅 2025-03-04
CVSS 4.3 Dossier →
Page 4 of 7 (154 Total Records)