PT-2025-26171 · Open5Gs · Open5Gs

Cmdcsop · Published 2025-06-18 · Updated 2025-06-23 · CVE-2025-44952

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions open5gs versions 2.7.2 and earlier

Description A missing length check in the ogs pfcp subnet add function from the PFCP library allows a local attacker to cause a Buffer Overflow by changing the session.dnn field with a value with length greater than 101.

Recommendations For open5gs versions 2.7.2 and earlier, as a temporary workaround, consider restricting access to the ogs pfcp subnet add function until a patch is available. Avoid using the session.dnn field with values longer than 101 characters in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2025-44952

Affected Products

Open5Gs

References · 10

• 🔥 https://github.com/open5gs/open5gs/issues/3775 · Exploit
• 🔥 https://gist.github.com/scmdcs/8643fbfc9490f40e955e9f9e9b0d9077 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-44952 · Security Note
• https://osv.dev/vulnerability/CVE-2025-44952 · Vendor Advisory
• https://t.me/cvetracker/26517 · Telegram Post
• https://twitter.com/CVEnew/status/1935727423699501413 · Twitter Post
• https://t.me/latest_high_impact_cve/2711 · Telegram Post
• https://gist.github.com/scemodicecosa/8643fbfc9490f40e955e9f9e9b0d9077 · Note
• https://twitter.com/cracbot/status/1937103416230363372 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1935409192904372275 · Twitter Post