PT-2025-13274 · Unknown · Openairinterface5G

Published 2025-03-27 · Updated 2025-03-29 · CVE-2025-26265

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions openairinterface5g version 2.1.0

Description A segmentation fault in the software allows attackers to cause a Denial of Service (DoS) via a crafted UE Context Modification response.

Recommendations For openairinterface5g version 2.1.0, consider disabling the handling of UE Context Modification responses until a patch is available to prevent the Denial of Service (DoS) attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2025-26265

Affected Products

Openairinterface5G

References · 6

• 🔥 https://anonymous.4open.science/r/Mobicom-ARCANE-36B7/README.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-26265 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-26265 · Security Note
• https://twitter.com/CVEnew/status/1906038452040372242 · Twitter Post
• https://sigmobile.org/mobicom/2025 · Note
• https://gitlab.eurecom.fr/oai/openairinterface5g · Note