agentprime: open5gsEvery new CVE for open5gs.https://agentprime.io/CVE-2026-116544: Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse_scheme_outputhttps://agentprime.io/advisories/CVE-2026-116544/https://agentprime.io/advisories/CVE-2026-116544/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 14:59:42 GMTCVECVE-2026-116543: Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parserhttps://agentprime.io/advisories/CVE-2026-116543/https://agentprime.io/advisories/CVE-2026-116543/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 14:59:42 GMTCVECVE-2026-108105: Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Requesthttps://agentprime.io/advisories/CVE-2026-108105/https://agentprime.io/advisories/CVE-2026-108105/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 14:08:16 GMTCVECVE-2026-108103: Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IEhttps://agentprime.io/advisories/CVE-2026-108103/https://agentprime.io/advisories/CVE-2026-108103/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 14:08:13 GMTCVECVE-2026-108102: Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IEhttps://agentprime.io/advisories/CVE-2026-108102/https://agentprime.io/advisories/CVE-2026-108102/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 14:08:09 GMTCVECVE-2026-107166: Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resourceshttps://agentprime.io/advisories/CVE-2026-107166/https://agentprime.io/advisories/CVE-2026-107166/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 16:00:09 GMTCVECVE-2026-92417: Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereferencehttps://agentprime.io/advisories/CVE-2026-92417/https://agentprime.io/advisories/CVE-2026-92417/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 18:00:08 GMTCVECVE-2026-92416: Open5GS PFCP Session Report Request n4-handler.c smf_n4_handle_session_report_request assertionhttps://agentprime.io/advisories/CVE-2026-92416/https://agentprime.io/advisories/CVE-2026-92416/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 17:45:09 GMTCVECVE-2026-91855: Open5GS PFCP Message handler.c denial of servicehttps://agentprime.io/advisories/CVE-2026-91855/https://agentprime.io/advisories/CVE-2026-91855/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 16:45:07 GMTCVECVE-2026-90707: Open5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after freehttps://agentprime.io/advisories/CVE-2026-90707/https://agentprime.io/advisories/CVE-2026-90707/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 10:45:08 GMTCVECVE-2026-86212: Open5GS AMF/MME improper authorizationhttps://agentprime.io/advisories/CVE-2026-86212/https://agentprime.io/advisories/CVE-2026-86212/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 11:15:10 GMTCVECVE-2026-82590: Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertionhttps://agentprime.io/advisories/CVE-2026-82590/https://agentprime.io/advisories/CVE-2026-82590/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 30 Aug 2026 22:30:11 GMTCVECVE-2026-82589: Open5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of servicehttps://agentprime.io/advisories/CVE-2026-82589/https://agentprime.io/advisories/CVE-2026-82589/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 30 Aug 2026 22:15:11 GMTCVECVE-2026-82588: Open5GS Transfer Endpoint namf-handler.c null pointer dereferencehttps://agentprime.io/advisories/CVE-2026-82588/https://agentprime.io/advisories/CVE-2026-82588/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 30 Aug 2026 22:00:13 GMTCVECVE-2026-82587: Open5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruptionhttps://agentprime.io/advisories/CVE-2026-82587/https://agentprime.io/advisories/CVE-2026-82587/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 30 Aug 2026 19:00:11 GMTCVECVE-2026-78186: Open5GS HSS hss-cx-path.c assertionhttps://agentprime.io/advisories/CVE-2026-78186/https://agentprime.io/advisories/CVE-2026-78186/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 04:15:08 GMTCVECVE-2026-78158: Open5GS AMF UEContextReleaseRequest Path improper authorizationhttps://agentprime.io/advisories/CVE-2026-78158/https://agentprime.io/advisories/CVE-2026-78158/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 00:15:08 GMTCVECVE-2026-78157: Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-boundshttps://agentprime.io/advisories/CVE-2026-78157/https://agentprime.io/advisories/CVE-2026-78157/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 00:00:13 GMTCVECVE-2026-78156: Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflowhttps://agentprime.io/advisories/CVE-2026-78156/https://agentprime.io/advisories/CVE-2026-78156/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 23 Aug 2026 23:45:09 GMTCVECVE-2025-15687: Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of servicehttps://agentprime.io/advisories/CVE-2025-15687/https://agentprime.io/advisories/CVE-2025-15687/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 02:45:10 GMTCVECVE-2025-15686: Open5GS HSS Service fd_msg_sess_get denial of servicehttps://agentprime.io/advisories/CVE-2025-15686/https://agentprime.io/advisories/CVE-2025-15686/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 02:30:08 GMTCVECVE-2025-15685: Open5GS freeDiameter memory corruptionhttps://agentprime.io/advisories/CVE-2025-15685/https://agentprime.io/advisories/CVE-2025-15685/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 02:15:08 GMTCVECVE-2025-15684: Open5GS CER init.c diam_log_func assertionhttps://agentprime.io/advisories/CVE-2025-15684/https://agentprime.io/advisories/CVE-2025-15684/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 02:00:10 GMTCVECVE-2024-14044: Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflowhttps://agentprime.io/advisories/CVE-2024-14044/https://agentprime.io/advisories/CVE-2024-14044/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 01:00:14 GMTCVECVE-2024-14043: Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflowhttps://agentprime.io/advisories/CVE-2024-14043/https://agentprime.io/advisories/CVE-2024-14043/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 23:15:14 GMTCVECVE-2024-14042: Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflowhttps://agentprime.io/advisories/CVE-2024-14042/https://agentprime.io/advisories/CVE-2024-14042/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 19:15:09 GMTCVECVE-2026-15720: Pre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handlerhttps://agentprime.io/advisories/CVE-2026-15720/https://agentprime.io/advisories/CVE-2026-15720/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 18:20:22 GMTCVECVE-2026-15194: Open5GS AMF context.c amf_context_final use after freehttps://agentprime.io/advisories/CVE-2026-15194/https://agentprime.io/advisories/CVE-2026-15194/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 17:00:07 GMTCVECVE-2026-14618: Open5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover denial of servicehttps://agentprime.io/advisories/CVE-2026-14618/https://agentprime.io/advisories/CVE-2026-14618/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Jul 2026 06:00:09 GMTCVECVE-2026-10565: Open5GS NGAP Handover gmm-sm.c gmm_state_security_mode race conditionhttps://agentprime.io/advisories/CVE-2026-10565/https://agentprime.io/advisories/CVE-2026-10565/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 01:30:09 GMTCVECVE-2026-10157: Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authenticationhttps://agentprime.io/advisories/CVE-2026-10157/https://agentprime.io/advisories/CVE-2026-10157/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 May 2026 00:30:10 GMTCVECVE-2026-10156: Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumptionhttps://agentprime.io/advisories/CVE-2026-10156/https://agentprime.io/advisories/CVE-2026-10156/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 30 May 2026 23:45:09 GMTCVECVE-2026-10117: Open5GS nghttp2-server.c ogs_pool_id_calloc denial of servicehttps://agentprime.io/advisories/CVE-2026-10117/https://agentprime.io/advisories/CVE-2026-10117/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 30 May 2026 12:30:08 GMTCVECVE-2026-10116: Open5GS ue-authentications Endpoint ogs-timer.c ogs_sbi_xact_add denial of servicehttps://agentprime.io/advisories/CVE-2026-10116/https://agentprime.io/advisories/CVE-2026-10116/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 30 May 2026 11:00:11 GMTCVECVE-2026-10115: Open5GS Shared NF-profile nnrf-handler.c denial of servicehttps://agentprime.io/advisories/CVE-2026-10115/https://agentprime.io/advisories/CVE-2026-10115/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 30 May 2026 10:15:07 GMTCVECVE-2026-10114: Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds writehttps://agentprime.io/advisories/CVE-2026-10114/https://agentprime.io/advisories/CVE-2026-10114/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 30 May 2026 10:00:09 GMTCVECVE-2026-10113: Open5GS Shared NF-profile nnrf-handler.c denial of servicehttps://agentprime.io/advisories/CVE-2026-10113/https://agentprime.io/advisories/CVE-2026-10113/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 30 May 2026 08:45:08 GMTCVECVE-2026-8746: Open5GS NRF nghttp2-server.c discover_handler use after freehttps://agentprime.io/advisories/CVE-2026-8746/https://agentprime.io/advisories/CVE-2026-8746/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 17 May 2026 10:15:08 GMTCVECVE-2026-8745: Open5GS AUSF nausf-handler.c ogs_timer_add denial of servicehttps://agentprime.io/advisories/CVE-2026-8745/https://agentprime.io/advisories/CVE-2026-8745/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 17 May 2026 09:45:07 GMTCVECVE-2026-8744: Open5GS NRF context.c ogs_sbi_nf_service_add denial of servicehttps://agentprime.io/advisories/CVE-2026-8744/https://agentprime.io/advisories/CVE-2026-8744/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 17 May 2026 09:15:11 GMTCVECVE-2026-8743: Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorizationhttps://agentprime.io/advisories/CVE-2026-8743/https://agentprime.io/advisories/CVE-2026-8743/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 17 May 2026 09:00:13 GMTCVECVE-2026-8731: Open5GS NRF client.c ogs_sbi_client_add denial of servicehttps://agentprime.io/advisories/CVE-2026-8731/https://agentprime.io/advisories/CVE-2026-8731/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 17 May 2026 04:15:09 GMTCVECVE-2026-8730: Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of servicehttps://agentprime.io/advisories/CVE-2026-8730/https://agentprime.io/advisories/CVE-2026-8730/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 17 May 2026 03:45:09 GMTCVECVE-2026-8729: Open5GS NRF message.c denial of servicehttps://agentprime.io/advisories/CVE-2026-8729/https://agentprime.io/advisories/CVE-2026-8729/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 17 May 2026 03:30:09 GMTCVECVE-2026-8728: Open5GS NRF conv.c ogs_sbi_discovery_option_parse_plmn_list denial of servicehttps://agentprime.io/advisories/CVE-2026-8728/https://agentprime.io/advisories/CVE-2026-8728/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 17 May 2026 02:15:08 GMTCVECVE-2026-8292: Open5GS NRF conv.c yuarel_parse denial of servicehttps://agentprime.io/advisories/CVE-2026-8292/https://agentprime.io/advisories/CVE-2026-8292/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 15:00:13 GMTCVECVE-2026-8291: Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of servicehttps://agentprime.io/advisories/CVE-2026-8291/https://agentprime.io/advisories/CVE-2026-8291/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 13:30:12 GMTCVECVE-2026-8290: Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of servicehttps://agentprime.io/advisories/CVE-2026-8290/https://agentprime.io/advisories/CVE-2026-8290/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 13:00:10 GMTCVECVE-2026-8289: Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of servicehttps://agentprime.io/advisories/CVE-2026-8289/https://agentprime.io/advisories/CVE-2026-8289/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 12:30:10 GMTCVECVE-2026-8288: Open5GS SMF gsm-handler.c denial of servicehttps://agentprime.io/advisories/CVE-2026-8288/https://agentprime.io/advisories/CVE-2026-8288/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 12:15:10 GMTCVE