PT-2025-32311 · Open5Gs · Open5Gs

Sq0409 · Publicado 2025-08-07 · Atualizado 2025-08-08 · CVE-2025-8698

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Open5GS versions up to 2.7.5

Description A problematic issue exists in Open5GS related to the amf nsmf pdusession handle release sm context function within the src/amf/nsmf-handler.c file of the AMF Service component. The issue leads to a reachable assertion when triggered. Local access is required for exploitation. The exploit has been publicly disclosed.

Recommendations Apply the patch 66bc558e417e70ae216ec155e4e81c14ae0ecf30 to resolve the issue.

Exploit

Correção

Assertion Failure

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

CVE-2025-8698

Produtos afetados

Open5Gs

Referências · 11

• 🔥 https://github.com/open5gs/open5gs/issues/4012 · Exploit
• 🔥❌ https://github.com/user-attachments/files/21356631/amf_nsmf_pdusession_handle_release_sm_context.zip · Exploit, Deleted
• https://github.com/open5gs/open5gs/commit/66bc558e417e70ae216ec155e4e81c14ae0ecf30 · Correção
• https://twitter.com/CVEnew/status/1953558317122441433 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1953695526026613058 · Publicação no Twitter
• https://vuldb.com/?id.319128 · Nota
• https://t.me/CVEtracker/29472 · Publicação no Telegram
• https://vuldb.com/?ctiid.319128 · Nota
• https://osv.dev/vulnerability/CVE-2025-8698 · Aviso do Fabricante
• https://vuldb.com/?submit.621282 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-8698 · Nota de Segurança