Advisories · Technology

Open5GS.

Every CVE that names Open5GS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-8801 CVE record

CVSS 6.9 Medium

Open5GS AMF gmm-sm.c gmm_state_exception denial of service
- Open5GS
- Denial of service
Not analysed yet 10 Aug 2025
CVE-2025-8800 CVE record

CVSS 6.9 Medium

Open5GS AMF esm-handler.c esm_handle_pdn_connectivity_request denial of service
- Open5GS
- Denial of service
Not analysed yet 10 Aug 2025
CVE-2025-8799 CVE record

CVSS 6.9 Medium

Open5GS AMF npcf-build.c amf_nsmf_pdusession_build_create_sm_context denial of service
- Open5GS
- Denial of service
Not analysed yet 10 Aug 2025
CVE-2025-8698 CVE record

CVSS 4.8 Medium

Open5GS AMF Service nsmf-handler.c amf_nsmf_pdusession_handle_release_sm_context assertion
- Open5GS
- Denial of service
Not analysed yet 7 Aug 2025
CVE-2025-7485 CVE record

CVSS 4.8 Medium

Open5GS SCTP Partial Message recv_handler assertion
- Open5GS
- Denial of service
Not analysed yet 12 Jul 2025
CVE-2025-6952 CVE record

CVSS 4.8 Medium

Open5GS AMF Service amf-sm.c amf_state_operational assertion
- Open5GS
- Denial of service
Not analysed yet 1 Jul 2025
CVE-2025-5935 CVE record

CVSS 6.9 Medium

Open5GS AMF/MME emm-sm.c common_register_state denial of service
- Open5GS
- Denial of service
Not analysed yet 10 Jun 2025
CVE-2025-5520 CVE record

CVSS 6.9 Medium

Open5GS AMF/MME emm_state_authentication assertion
- Open5GS
- Denial of service
Not analysed yet 3 Jun 2025
CVE-2025-5501 CVE record

CVSS 6.9 Medium

Open5GS NGAP PathSwitchRequest Message ngap-handler.c ngap_handle_path_switch_request_transfer assertion
- Open5GS
- Denial of service
Not analysed yet 3 Jun 2025
CVE-2025-1925 CVE record

CVSS 6.9 Medium

Open5GS AMF nsmf-handler.c amf_nsmf_pdusession_handle_update_sm_context denial of service
- Open5GS
- Denial of service
Not analysed yet 4 Mar 2025
CVE-2025-1893 CVE record

CVSS 5.3 Medium

Open5GS AMF gmm-sm.c gmm_state_authentication denial of service
- Open5GS
- Denial of service
Not analysed yet 4 Mar 2025
CVE-2023-4885 CVE record

CVSS 6.5 Medium

Multiple vulnerabilities in Open5GS
- Open5GS
- CWE-300
Not analysed yet 3 Oct 2023
CVE-2023-4884 CVE record

CVSS 6.5 Medium

Multiple vulnerabilities in Open5GS
- Open5GS
- Authentication bypass
Not analysed yet 3 Oct 2023
CVE-2023-4883 CVE record

CVSS 7.5 High

Multiple vulnerabilities in Open5GS
- Open5GS
- Memory corruption
Not analysed yet 3 Oct 2023
CVE-2023-4882 CVE record

CVSS 7.5 High

Multiple vulnerabilities in Open5GS
- Open5GS
- Denial of service
Not analysed yet 3 Oct 2023
CVE-2023-23846 CVE record

CVSS 7.5 High

Resource allocation without limits in Open5GS
- Open5GS
- Denial of service
Not analysed yet 1 Feb 2023
CVE-2022-3354 CVE record

CVSS 3.5 Low

Open5GS UDP Packet ogs-tlv-msg.c denial of service
- Open5GS
- Denial of service
Not analysed yet 28 Sept 2022
CVE-2022-3299 CVE record

CVSS 4.3 Medium

Open5GS AMF client.c denial of service
- Open5GS
- Denial of service
Not analysed yet 26 Sept 2022
CVE-2022-39063 CVE record

Open5GS: When Open5GS UPF receives a PFCP Session Establishment Request…
- Open5GS
- CWE-676
Not analysed yet 16 Sept 2022