CVE-2026-1522: Improper Resource Shutdown or Release

A weakness has been identified in Open5GS up to 2.7.6. This vulnerability affects the function sgwcs5chandlemodifybearerresponse of the file src/sgwc/s5c-handler.c of the component SGWC. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has...

CVE-2026-1521: Improper Resource Shutdown or Release

A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwcs5chandlebearerresourcefailureindication of the file src/sgwc/s5c-handler.c of the component SGWC. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit ha...

CVE-2025-14953: NULL Pointer Dereference

A flaw has been found in Open5GS up to 2.7.5. This impacts the function ogspfcphandlecreatepdr in the library lib/pfcp/handler.c of the component FAR-ID Handler. Executing a manipulation can lead to null pointer dereference. The attack may be performed from remote. The attack requires a high leve...

EUVD-2005-2643

Malware in sbrugna...

CVE-2025-8698: Reachable Assertion

A vulnerability was found in Open5GS up to 2.7.5. It has been classified as problematic. Affected is the function amfnsmfpdusessionhandlereleasesmcontext of the file src/amf/nsmf-handler.c of the component AMF Service. The manipulation leads to reachable assertion. Attacking locally is a...

Open5GS ngap-handler.c Denial of Service Vulnerability

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS v2.4.11 due to a memory leak in the ngap handler.c component. By using a specially crafted UE attachment, an attacker can exploit this...

Memory corruption

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted UE attachment...

CVE-2022-43223

CVE-2022-43223 affects Open5GS v2.4.11, with a memory leak in the ngap-handler.c component that can cause a Denial of Service via a crafted UE attachment. The NVD entry cites a CVSS v3.1 base score of 7.5 (HIGH) with network access, low attack complexity, no privileges, no user interaction, and i...

CVE-2022-43223: Missing Release of Memory after Effective Lifetime

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted UE attachment...

CVE-2021-44108: NULL Pointer Dereference

A null pointer dereference in src/amf/namf-handler.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request to amf...

CVE-2005-2642

Buffer overflow in the muttdecodexbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext...

CVE-2008-3652: Undefined Security Weakness

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" phase 1 handle when it has been initiated remotely, which allows remote attackers to cause a denial of service resource consumption...

CVE-2005-2642: Undefined Security Weakness

Buffer overflow in the muttdecodexbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext...