PT-2025-53699 · Open5Gs · Open5Gs

Ziyulin · Published 2025-12-29 · Updated 2025-12-31 · CVE-2025-15176

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Open5GS versions through 2.7.5

Description A flaw exists in Open5GS affecting the decode ipv6 header/ogs pfcp pdr rule find by packet function within the lib/pfcp/rule-match.c file of the PFCP Session Establishment Request Handler component. Manipulation of this function can lead to a reachable assertion. The attack can be launched remotely.

Recommendations Apply patch b72d8349980076e2c033c8324f07747a86eea4f8 to resolve this issue.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2025-15176

Affected Products

Open5Gs

References · 13

• 🔥 https://github.com/open5gs/open5gs/issues/4180 · Exploit
• 🔥 https://github.com/open5gs/open5gs/issues/4180#issue-3666760066 · Exploit
• 🔥 https://github.com/open5gs/open5gs/issues/4180#issuecomment-3615555671 · Exploit
• 🔥 https://vuldb.com/?submit.719830 · Exploit
• https://github.com/open5gs/open5gs/commit/b72d8349980076e2c033c8324f07747a86eea4f8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-15176 · Security Note
• https://osv.dev/vulnerability/CVE-2025-15176 · Vendor Advisory
• https://vuldb.com/?ctiid.338561 · Note
• https://t.me/CVEtracker/40818 · Telegram Post
• https://vuldb.com/?id.338561 · Note
• https://t.me/cveNotify/147406 · Telegram Post
• https://t.me/cveNotify/147022 · Telegram Post
• https://github.com/open5gs/open5gs · Note