CVE-2025-8805

Open5GS SMF component is affected by CVE-2025-8805 via the function smf_gsm_state_wait_pfcp_deletion in src/smf/gsm-sm.c, which can lead to a remote denial of service. Upgrade from 2.7.5 to 2.7.6 to address the issue; the patch is identified as c58b8f081986aaf2a312d73a0a17985518b47fe6. Exploitati...

CVE-2025-8802

A vulnerability was determined in Open5GS up to 2.7.5. This vulnerability affects the function smfstateoperational of the file src/smf/smf-sm.c of the component SMF. The manipulation of the argument stream leads to denial of service. The attack can be initiated remotely. The exploit has been...

CVE-2025-8799

Open5GS AMF vulnerability (CVE-2025-8799) affects versions up to 2.7.5. The issue lies in the functions amf_npcf_am_policy_control_build_create and amf_nsmf_pdusession_build_create_sm_context in src/amf/npcf-build.c, enabling remote denial of service. Public exploit details exist; upgrading to 2....