PT-2025-52490 · Open5Gs · Open5Gs

Ziyulin · Published 2025-12-19 · Updated 2025-12-24 · CVE-2025-14955

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.5

Description A flaw exists within Open5GS, specifically in the ogs pfcp handle create pdr function located in the lib/pfcp/handler.c library of the PFCP component. This issue involves improper initialization and can be exploited remotely. The complexity of exploitation is considered high, and it appears to be difficult to execute. The exploit has been publicly released.

Recommendations Apply patch 773117aa5472af26fc9f80e608d3386504c3bdb7.

Exploit

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

CVE-2025-14955

Affected Products

Open5Gs

References · 15

• 🔥 https://github.com/open5gs/open5gs/issues/4182#issuecomment-3616081878 · Exploit
• 🔥 https://github.com/open5gs/open5gs/issues/4182#issue-3670797098 · Exploit
• 🔥 https://github.com/open5gs/open5gs/issues/4182 · Exploit
• https://github.com/open5gs/open5gs/commit/773117aa5472af26fc9f80e608d3386504c3bdb7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-14955 · Security Note
• https://osv.dev/vulnerability/CVE-2025-14955 · Vendor Advisory
• https://vuldb.com/?ctiid.337591 · Note
• https://t.me/cveNotify/146363 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2002230481438277668 · Twitter Post
• https://t.me/CVEtracker/40286 · Telegram Post
• https://vuldb.com/?id.337591 · Note
• https://twitter.com/CVEnew/status/2002099142701789393 · Twitter Post
• https://github.com/open5gs/open5gs · Note
• https://t.me/cveNotify/146770 · Telegram Post
• https://vuldb.com/?submit.716841 · Note