CVE-2025-14954

Open5GS up to 2.7.6 is affected by an assertion-triggering flaw in the QER/FAR/URR/PDR context (lib/pfcp/context.c): ogs_pfcp_pdr_find_or_add/ogs_pfcp_far_find_or_add/ogs_pfcp_urr_find_or_add/ogs_pfcp_qer_find_or_add. The issue allows remote initiation and is triggered by manipulating these PFCP ...