Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the GetSUCI function when processing a crafted 5GS Mobile Identity in a NAS Registration Request message. An attacker can cause a crash of the AMF component by sending a specially crafted message...

PT-2025-52289

Name of the Vulnerable Software and Affected Versions omec-project UPF version 2.1.3-dev Description A denial-of-service issue exists in the omec-project UPF pfcpiface component. Specifically, when a PFCP Session Establishment Request is sent to the UPF’s N4/PFCP endpoint without the mandatory...

CVE-2025-63288

In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of service...