355 matches found
CVE-2025-26265
A segmentation fault in openairinterface5g v2.1.0 allows attackers to cause a Denial of Service DoS via a crafted UE Context Modification response...
PT-2025-13274
Name of the Vulnerable Software and Affected Versions openairinterface5g version 2.1.0 Description A segmentation fault in the software allows attackers to cause a Denial of Service DoS via a crafted UE Context Modification response. Recommendations For openairinterface5g version 2.1.0, consider...
CVE-2025-26265
A segmentation fault in openairinterface5g v2.1.0 allows attackers to cause a Denial of Service DoS via a crafted UE Context Modification response...
CVE-2025-26265: Improper Restriction of Operations within the Bounds of a Memory Buffer
A segmentation fault in openairinterface5g v2.1.0 allows attackers to cause a Denial of Service DoS via a crafted UE Context Modification response...
CVE-2025-26265
A segmentation fault in openairinterface5g v2.1.0 allows attackers to cause a Denial of Service DoS via a crafted UE Context Modification response...
CVE-2025-26265
The openairinterface5g v2.1.0 software is vulnerable to a segmentation fault caused by an Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119). Attackers can exploit this by sending a crafted UE Context Modification response , leading to a Denial of Service (DoS) . A ...
CVE-2025-25774
An issue was discovered in Open5GS v2.7.2. When a UE switches between two gNBs and sends a handover request at a specific time, it may cause an exception in the AMF's internal state machine, leading to an AMF crash and resulting in a Denial of Service DoS...
CVE-2025-25774
An issue in Open5GS v2.7.2 allows an attacker to cause an AMF crash , resulting in a Denial of Service (DoS) . The vulnerability is triggered when a UE switches between two gNBs and sends a handover request at a specific time, causing an exception in the AMF's internal state machine due to insuff...
CVE-2024-38426: Improper Authentication
While processing the authentication message in UE, improper authentication may lead to information disclosure...
CVE-2024-56921
An issue was discovered in Open5gs v2.7.2. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of gmmstateexception function upon receipt of the NausfUEAuthenticationAuthenticate response...
Open5GS has an unspecified vulnerability (CNVD-2025-03129)
Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS, which can be exploited by an attacker to send a "UE Context Modification Response" message that lacks the required mmeues1apid'...
Open5GS UE Context Release Request Packet Denial of Service Vulnerability
Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a denial of service vulnerability that stems from the inclusion of reachable assertions in the UE Context Release Request packet handler. An attacker...
Open5GS Denial of Service Vulnerability (CNVD-2025-03154)
Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a security vulnerability that can be exploited to cause a denial of service by an attacker who sends an "Initial UE Message" that lacks the required...
Open5GS Denial of Service Vulnerability (CNVD-2025-03195)
Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS, which can be exploited by an attacker to send a "UE Context Release Request" message missing the required mmeues1apid' field to...
Open5GS Denial of Service Vulnerability (CNVD-2025-03196)
Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS, which can be exploited by an attacker to send a "UE Context Modification Failure" message missing the required mmeues1apid' fie...
Open5GS Denial of Service Vulnerability (CNVD-2025-03148)
Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS, which can be exploited to cause a denial of service by an attacker who would send an initial UE message'' message that lacks th...
CVE-2020-11268
Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Auto, Snapdragon Mobile...
CVE-2024-23353
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESMIEI...
CVE-2024-56921
An issue was discovered in Open5gs v2.7.2. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of gmmstateexception function upon receipt of the NausfUEAuthenticationAuthenticate response...
