Priority LOW 28
Open5GS 2.6.1 through 2.8.0 contains an out-of-bounds read vulnerability in parse_scheme_output() in lib/sbi/conv.c during SUCI de-concealment due to incomplete length validation.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00354 · Published 2026-10-26 · No fix listed CWE-125
Priority HIGH 77
Open5GS 1.3.0 through 2.8.0 contains a heap out-of-bounds write vulnerability in parse_multipart() that allows unauthenticated attackers to corrupt memory by supplying an empty multipart boundary.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00387 · Published 2026-10-26 · No fix listed CWE-787
Priority HIGH 69
Open5GS through 2.8.0 contains a reachable assertion vulnerability in mme_gn_handle_sgsn_context_request() that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00523 · Published 2026-10-09 · No fix listed CWE-617
Priority LOW 37
Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_dropped_dl_traffic_threshold() that allows remote unauthenticated attackers to read past IE buffers via short IEs.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00387 · Published 2026-10-09 · No fix listed CWE-125
Priority LOW 37
Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_volume_measurement() in lib/pfcp/types.c that allows remote unauthenticated attackers to read past IE buffers.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00387 · Published 2026-10-09 · No fix listed CWE-125
Priority HIGH 76
In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00542 · Published 2026-07-14 · No fix listed CWE-125
Priority MEDIUM 57
A security flaw has been discovered in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00367 · Published 2026-05-17 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was identified in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00372 · Published 2026-05-17 · No fix listed CWE-404
Priority MEDIUM 57
A vulnerability was determined in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00455 · Published 2026-05-17 · No fix listed CWE-404
Priority MEDIUM 57
A vulnerability was found in Open5GS up to 2.7.6.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00271 · Published 2026-05-17 · No fix listed CWE-266
Priority MEDIUM 57
A vulnerability has been found in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0038 · Published 2026-05-17 · No fix listed CWE-404
Priority MEDIUM 57
A flaw has been found in Open5GS up to 2.7.6.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0038 · Published 2026-05-17 · No fix listed CWE-404
Priority MEDIUM 57
A vulnerability was detected in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0039 · Published 2026-05-17 · No fix listed CWE-404
Priority MEDIUM 57
A security vulnerability has been detected in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0039 · Published 2026-05-17 · No fix listed CWE-404
Priority MEDIUM 57
A security vulnerability has been detected in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00372 · Published 2026-05-11 · No fix listed CWE-404
Priority MEDIUM 57
A weakness has been identified in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00378 · Published 2026-05-11 · No fix listed CWE-404
Priority MEDIUM 57
A security flaw has been discovered in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00372 · Published 2026-05-11 · No fix listed CWE-404
Priority MEDIUM 57
A vulnerability was identified in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00372 · Published 2026-05-11 · No fix listed CWE-404
Priority MEDIUM 57
A vulnerability was determined in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00378 · Published 2026-05-11 · No fix listed CWE-404
Priority MEDIUM 57
A vulnerability was determined in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0038 · Published 2026-05-11 · No fix listed CWE-404
Priority MEDIUM 57
A vulnerability was found in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00471 · Published 2026-05-11 · No fix listed CWE-404
Priority MEDIUM 57
A vulnerability has been found in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00372 · Published 2026-05-11 · No fix listed CWE-404
Priority MEDIUM 57
A flaw has been found in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00372 · Published 2026-05-11 · No fix listed CWE-404
Priority MEDIUM 57
A vulnerability was detected in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00461 · Published 2026-05-11 · No fix listed CWE-404
Priority MEDIUM 57
A vulnerability was determined in Open5GS up to 2.7.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00378 · Published 2026-05-10 · No fix listed CWE-404
Load more
THREATIST.IORead the docs