Vulnerability Description
A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the file src/sgwc/context.c. The manipulation leads to reachable assertion. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The issue report is flagged as already-fixed.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Open5Gs | Open5Gs | <= 2.7.5 |
Related Weaknesses (CWE)
References
- https://github.com/open5gs/open5gs/
- https://github.com/open5gs/open5gs/issues/4233ExploitIssue TrackingVendor Advisory
- https://github.com/open5gs/open5gs/issues/4233#issue-3776216182ExploitIssue TrackingVendor Advisory
- https://vuldb.com/?ctiid.341598Permissions RequiredVDB Entry
- https://vuldb.com/?id.341598Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.729339Third Party AdvisoryVDB Entry
FAQ
What is CVE-2025-15531?
CVE-2025-15531 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the file src/sgwc/context.c. The manipulation leads to reachable assertion. The attack...
How severe is CVE-2025-15531?
CVE-2025-15531 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-15531?
Check the references section above for vendor advisories and patch information. Affected products include: Open5Gs Open5Gs.