PT-2026-3328 · Open5Gs · Open5Gs

Ziyulin · Published 2026-01-16 · Updated 2026-02-09 · CVE-2025-15529

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Open5GS versions up to 2.7.6

Description A denial-of-service issue exists in Open5GS, specifically within the SGW-C (Serving Gateway Control plane) component. The issue resides in the handling of Create Session Response messages and affects the sgwc s5c handle create session response function located in the src/sgwc/s5c-handler.c file. An attacker can trigger this issue, causing the SGWC process to crash and leading to service disruption. Remote exploitation is possible.

Recommendations Versions up to 2.7.6 should deploy the patch b19cf6a2dbf5d30811be4488bf059c865bd7d1d2.

Exploit

Fix

DoS

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2025-15529

Affected Products

Open5Gs

References · 14

• 🔥 https://github.com/open5gs/open5gs/issues/4226#issue-3769595366 · Exploit
• https://github.com/open5gs/open5gs/issues/4226 · Vendor Advisory
• https://github.com/open5gs/open5gs/commit/b19cf6a2dbf5d30811be4488bf059c865bd7d1d2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-15529 · Security Note
• https://osv.dev/vulnerability/CVE-2025-15529 · Vendor Advisory
• https://twitter.com/transilienceai/status/2012367107728531590 · Twitter Post
• https://vuldb.com/?submit.738372 · Note
• https://vuldb.com/?id.341596 · Note
• https://github.com/open5gs/open5gs · Note
• https://vuldb.com/?submit.728130 · Note
• https://twitter.com/VulmonFeeds/status/2012361125753459103 · Twitter Post
• https://vuldb.com/?ctiid.341596 · Note
• https://t.me/cveNotify/151477 · Telegram Post
• https://twitter.com/CVEnew/status/2012303174556860716 · Twitter Post