CVE-2025-14953

MediumCVSS 5.3/10Last modified Oct 13, 2026

Description

A flaw has been found in Open5GS up to 2.7.5. This impacts the function ogs_pfcp_handle_create_pdr in the library lib/pfcp/handler.c of the component FAR-ID Handler. Executing a manipulation can lead to null pointer dereference. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is said to be difficult. The exploit has been published and may be used. This patch is called 93a9fd98a8baa94289be3b982028201de4534e32. It is advisable to implement a patch to correct this issue.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404CWE-476

Affected software

No affected versions have been published.

Timeline

Published
Dec 19, 2025
Last modified
Oct 13, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-149545.9A vulnerability has been found in Open5GS up to 2.7.6. Affected is the function ogs_pfcp_pdr_find_or_add/ogs_pfcp_far_find_or_add/ogs_pfcp_uCVE-2025-149553.7A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ogs_pfcp_handle_create_pdr in the library lCVE-2025-149567.1A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of theCVE-2025-149575.5A vulnerability was identified in WebAssembly Binaryen up to 125. This affects the function IRBuilder::makeLocalGet/IRBuilder::makeLocalSet/CVE-2025-149587.8A security flaw has been discovered in floooh sokol up to 33e2271c431bf21de001e972f72da17a984da932. This vulnerability affects the function CVE-2025-149599.8A weakness has been identified in code-projects Simple Stock System 1.0. This issue affects some unknown processing of the file /market/signCVE-2025-14966.5Improper Restriction of Excessive Authentication Attempts vulnerability in BG-TEK Coslat Hotspot allows Password Brute Forcing, AuthenticatiCVE-2025-149609.8A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0. Impacted is an unknown function of theCVE-2025-149619.8A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0. The affected element is an unknown function of the fCVE-2025-149626.1A flaw has been found in code-projects Simple Stock System 1.0. The impacted element is an unknown function of the file /market/chatuser.phpCVE-2025-149637.8A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevatedCVE-2025-149649.8A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521. This affects the function sprintf of the file /cgi-bin/cstecgi.cgi. S