Description
A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack may be launched remotely. The patch is identified as 8f07b507b78ff94776f2cd49276eb116ed93d7f2. A patch should be applied to remediate this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Open5GS | 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8.0 | — |
References
- VDB-405595 | Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereference vdb-entry technical-description
- VDB-405595 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-92417 | CVE Analysis and Report third-party-advisory
- Submit #940465 | Open5GS <= 2.8.0 (latest) Denial of service third-party-advisory
- https://github.com/open5gs/open5gs/issues/4745 issue-tracking
- https://github.com/open5gs/open5gs/commit/8f07b507b78ff94776f2cd49276eb116ed93d7f2 patch
- https://github.com/open5gs/open5gs/ product