CVE-2025-8804 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ngap_build_downlink_nas_transport of the component AMF. The man…
Medium CVSS: 5.5

CVE-2025-8804

A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ngap_build_downlink_nas_transport of the component AMF. The manipulation leads to reachable assertion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The identifier of the patch is bca0a7b6e01d254f4223b83831162566d4626428. It is recommended to upgrade the affected component.
Vendor
Open5gs
Product
Open5gs
CWE
CWE-617
Yayın Tarihi
2025-08-10 10:15:26
Güncelleme
2025-08-15 14:15:30
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-617 Open5gs MEDIUM Open5gs 2025

Referanslar

https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-8804 https://github.com/open5gs/open5gs/commit/bca0a7b6e01d254f4223b83831162566d4626428 https://github.com/open5gs/open5gs/issues/3950 https://github.com/open5gs/open5gs/issues/3950#issuecomment-3034693457 https://github.com/open5gs/open5gs/releases/tag/v2.7.6 https://github.com/user-attachments/files/21030801/newdata_for_ngap.zip https://vuldb.com/?ctiid.319333 https://vuldb.com/?id.319333 https://vuldb.com/?submit.625698 https://vuldb.com/?submit.626124 https://github.com/open5gs/open5gs/issues/3950