PT-2025-32311 · Open5Gs · Open5Gs

Sq0409 · Published 2025-08-07 · Updated 2025-08-08 · CVE-2025-8698

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Open5GS versions up to 2.7.5

Description A problematic issue exists in Open5GS related to the amf nsmf pdusession handle release sm context function within the src/amf/nsmf-handler.c file of the AMF Service component. The issue leads to a reachable assertion when triggered. Local access is required for exploitation. The exploit has been publicly disclosed.

Recommendations Apply the patch 66bc558e417e70ae216ec155e4e81c14ae0ecf30 to resolve the issue.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2025-8698

Affected Products

Open5Gs

References · 11

• 🔥 https://github.com/open5gs/open5gs/issues/4012 · Exploit
• 🔥❌ https://github.com/user-attachments/files/21356631/amf_nsmf_pdusession_handle_release_sm_context.zip · Exploit, Deleted
• https://github.com/open5gs/open5gs/commit/66bc558e417e70ae216ec155e4e81c14ae0ecf30 · Patch
• https://osv.dev/vulnerability/CVE-2025-8698 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8698 · Security Note
• https://twitter.com/CVEnew/status/1953558317122441433 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1953695526026613058 · Twitter Post
• https://vuldb.com/?id.319128 · Note
• https://t.me/CVEtracker/29472 · Telegram Post
• https://vuldb.com/?ctiid.319128 · Note
• https://vuldb.com/?submit.621282 · Note