CVE-2026-8289

Description

A vulnerability was identified in Open5GS up to 2.7.7. This vulnerability affects the function smf_nsmf_handle_update_data_in_vsmf of the file /src/smf/nsmf-handler.c of the component SMF. The manipulation of the argument qosFlowProfile leads to denial of service. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

References

https://vuldb.com/vuln/362586/cti

https://vuldb.com/vuln/362586

https://vuldb.com/submit/808490

https://github.com/open5gs/open5gs/issues/4453

https://github.com/open5gs/open5gs/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4