Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Open5GS — Vulnerabilities & Security Advisories 142

All 142 CVE vulnerabilities found in Open5GS, with AI-generated Chinese analysis, references, and POCs.

This page aggregates Common Weakness Enumerations related to Open5GS, an open-source 5G core network implementation. The collection focuses on security flaws identified within this specific software stack, covering a broad time range from early initial releases through recent updates. It captures diverse weakness types including buffer overflows, logic errors, and configuration misconfigurations that have been reported by the community or disclosed by vendors. The data reflects the evolving security posture of the project as it has gained adoption in both laboratory and production environments. Visitors can use this resource to track vendor advisories associated with Open5GS, gaining insight into how issues are reported and resolved over time. You can also deepen your understanding of specific weakness classes by seeing how they manifest in a 5G core context, which often differs from traditional enterprise software. Furthermore, this page allows users to look up a product's vulnerability history to assess the long-term stability and maintenance quality of the codebase. By analyzing these trends, developers and security professionals can identify recurring patterns of defects, prioritize patching efforts, and evaluate the effectiveness of past security fixes. This historical perspective is essential for organizations relying on this technology, as it provides context beyond individual incident reports. The aggregated data serves as a factual record of known issues, facilitating better risk management and informed decision-making for infrastructure planners and security analysts alike.

Vendor: unspecified

CVE ID Title CVSS Severity Published
CVE-2026-116544 Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse_scheme_output CWE-125 3.7 Low 2026-10-26
CVE-2026-116543 Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser CWE-787 7.5 High 2026-10-26
CVE-2026-108105 Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request CWE-617 5.9 Medium 2026-10-09
CVE-2026-108103 Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE CWE-125 5.3 Medium 2026-10-09
CVE-2026-108102 Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE CWE-125 5.3 Medium 2026-10-09
CVE-2026-107166 Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources CWE-770 5.3 Medium 2026-10-07
CVE-2026-92417 Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereference CWE-476 6.5 Medium 2026-09-16
CVE-2026-92416 Open5GS PFCP Session Report Request n4-handler.c smf_n4_handle_session_report_request assertion CWE-617 4.3 Medium 2026-09-16
CVE-2026-91855 Open5GS PFCP Message handler.c denial of service CWE-404 5.3 Medium 2026-09-15
CVE-2026-90707 Open5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after free CWE-416 8.3 High 2026-09-14
CVE-2026-86212 Open5GS AMF/MME improper authorization CWE-285 4.3 Medium 2026-09-06
CVE-2026-82590 Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion CWE-617 4.3 Medium 2026-08-30
CVE-2026-82589 Open5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of service CWE-404 4.3 Medium 2026-08-30
CVE-2026-82588 Open5GS Transfer Endpoint namf-handler.c null pointer dereference CWE-476 4.3 Medium 2026-08-30
CVE-2026-82587 Open5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruption CWE-119 4.3 Medium 2026-08-30
CVE-2026-78186 Open5GS HSS hss-cx-path.c assertion CWE-617 4.3 Medium 2026-08-24
CVE-2026-78158 Open5GS AMF UEContextReleaseRequest Path improper authorization CWE-285 6.3 Medium 2026-08-24
CVE-2026-78157 Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds CWE-125 7.4 High 2026-08-24
CVE-2026-78156 Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow CWE-122 7.4 High 2026-08-23
CVE-2025-15687 Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service CWE-404 4.3 Medium 2026-08-12
CVE-2025-15686 Open5GS HSS Service fd_msg_sess_get denial of service CWE-404 4.3 Medium 2026-08-12
CVE-2025-15685 Open5GS freeDiameter memory corruption CWE-119 6.3 Medium 2026-08-12
CVE-2025-15684 Open5GS CER init.c diam_log_func assertion CWE-617 5.3 Medium 2026-08-12
CVE-2024-14044 Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow CWE-120 6.3 Medium 2026-08-12
CVE-2024-14043 Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow CWE-122 6.3 Medium 2026-08-11
CVE-2024-14042 Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow CWE-121 6.3 Medium 2026-08-11
CVE-2026-15720 Pre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler CWE-125 8.6 High 2026-07-14
CVE-2026-15194 Open5GS AMF context.c amf_context_final use after free CWE-416 3.3 Low 2026-07-09
CVE-2026-14618 Open5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover denial of service CWE-404 4.3 Medium 2026-07-04
CVE-2026-10565 Open5GS NGAP Handover gmm-sm.c gmm_state_security_mode race condition CWE-362 3.1 Low 2026-06-02

All 142 known CVE vulnerabilities affecting Open5GS with full Chinese analysis, references, and POCs where available.