CVE-2025-15530 Open5GS s11-handler.c assertion

A vulnerability was determined in Open5GS up to 2.7.6. This affects the function sgwcs11handlecreateindirectdataforwardingtunnelrequest of the file /src/sgwc/s11-handler.c. Executing a manipulation can lead to reachable assertion. The attack can be executed remotely. The exploit has been publicly...

CVE-2025-15530

Open5GS up to version 2.7.6 is affected by a vulnerability in the sgwc_s11_handle_create_indirect_data_forwarding_tunnel_request function within /src/sgwc/s11-handler.c. The issue allows remote manipulation that can lead to a reachable assertion, with exploitation publicly disclosed. Multiple sou...

EUVD-2025-206295

A vulnerability was found in Open5GS up to 2.7.6. Affected by this issue is the function sgwcs5chandlecreatesessionresponse of the file src/sgwc/s5c-handler.c. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been made public a...

PT-2026-3362

A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc bearer add of the file src/sgwc/context.c. The manipulation leads to reachable assertion. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The...

Open5GS security vulnerabilities

Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for LTE/NR networks. Versions of Open5GS 2.7.6 and earlier contain security vulnerabilities. These vulnerabilities stem from operations in the function...

CVE-2025-15529 Open5GS s5c-handler.c sgwc_s5c_handle_create_session_response denial of service

A vulnerability was found in Open5GS up to 2.7.6. Affected by this issue is the function sgwcs5chandlecreatesessionresponse of the file src/sgwc/s5c-handler.c. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been made public a...

CVE-2025-15529

Open5GS up to 2.7.6 is affected. The vulnerability lies in the sgwc_s5c_handle_create_session_response function in src/sgwc/s5c-handler.c; manipulation can cause a denial of service. Remote exploitation is possible and the exploit has been publicly released. A patch exists named b19cf6a2dbf5d3081...

Open5GS security vulnerabilities

Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for LTE/NR networks. Versions of Open5GS 2.7.6 and earlier contain security vulnerabilities. These vulnerabilities stem from the operation in the function sgwcs5chandlecreatesessionresponse...

CVE-2025-15417

A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwcs11handlecreatesessionrequest of the file src/sgwc/s11-handler.c of the component GTPv2-C F-TEID Handler. Such manipulation leads to denial of service. The attack must be carried out locally. The exploit is public...

CVE-2025-15417 Open5GS GTPv2-C F-TEID s11-handler.c sgwc_s11_handle_create_session_request denial of service

A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwcs11handlecreatesessionrequest of the file src/sgwc/s11-handler.c of the component GTPv2-C F-TEID Handler. Such manipulation leads to denial of service. The attack must be carried out locally. The exploit is public...

CVE-2025-15417

Open5GS up to 2.7.6 contains a denial-of-service vulnerability in the GTPv2-C F-TEID Handler, specifically in the function sgwc_s11_handle_create_session_request of src/sgwc/s11-handler.c. The attack is local, and publicly available exploit code exists. A patch identified as 465273d13ba5d47b274c3...