PT-2025-38150 · Open5Gs · Open5Gs

Tsiamoulis · Published 2025-09-17 · Updated 2025-09-19 · CVE-2025-55904

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to commit 67ba7f92bbd7a378954895d96d9d7b05d5b64615

Description Open5GS is susceptible to a NULL pointer dereference when processing a multipart/related HTTP POST request with an empty HTTP body sent to the SBI of AMF, AUSF, BSF, NRF, NSSF, PCF, SMF, UDM, or UDR. This issue occurs within the parse multipart function located in lib/sbi/message.c and can lead to a denial of service.

Recommendations Update Open5GS to commit 67ba7f92bbd7a378954895d96d9d7b05d5b64615 or a later version.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-55904

Affected Products

Open5Gs

References · 6

• 🔥 https://github.com/open5gs/open5gs/issues/3942 · Exploit
• 🔥 https://github.com/tsiamoulis/vuln-research/tree/main/CVE-2025-55904 · Exploit
• https://github.com/open5gs/open5gs/commit/67ba7f92bbd7a378954895d96d9d7b05d5b64615 · Patch
• https://osv.dev/vulnerability/CVE-2025-55904 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55904 · Security Note
• https://twitter.com/CVEnew/status/1969110931428032847 · Twitter Post