CVE-2025-15418

MediumCVSS 5.5/10Last modified Oct 14, 2026

Description

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function ogs_gtp2_parse_bearer_qos in the library lib/gtp/v2/types.c of the component Bearer QoS IE Length Handler. Performing a manipulation results in denial of service. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is named 4e913d21f2c032b187815f063dbab5ebe65fe83a. To fix this issue, it is recommended to deploy a patch.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404

Affected software

Vendor	Product	Versions
n/a	Open5GS	2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; 2.7.6

References

https://github.com/open5gs/open5gs/
https://github.com/open5gs/open5gs/commit/4e913d21f2c032b187815f063dbab5ebe65fe83aPatch
https://github.com/open5gs/open5gs/issues/4217Exploit, Issue Tracking, Vendor Advisory
https://github.com/open5gs/open5gs/issues/4217#issue-3759615968Exploit, Issue Tracking, Vendor Advisory
https://github.com/open5gs/open5gs/issues/4217#issuecomment-3690767105Exploit, Issue Tracking, Vendor Advisory
https://vuldb.com/?ctiid.339340Permissions Required, VDB Entry
https://vuldb.com/?id.339340Third Party Advisory, VDB Entry
https://vuldb.com/?submit.728043Third Party Advisory, VDB Entry
https://github.com/open5gs/open5gs/issues/4217Exploit, Issue Tracking, Vendor Advisory
https://github.com/open5gs/open5gs/issues/4217#issue-3759615968Exploit, Issue Tracking, Vendor Advisory
https://github.com/open5gs/open5gs/issues/4217#issuecomment-3690767105Exploit, Issue Tracking, Vendor Advisory

Timeline

Published: Jan 2, 2026
Last modified: Oct 14, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-154195.5A weakness has been identified in Open5GS up to 2.7.6. Affected by this issue is the function sgwc_s5c_handle_create_session_response of the CVE-2025-15429.3Improper permission control vulnerability in the OXARI ServiceDesk application could allow an attacker using a guest access or an unprivileg CVE-2025-154209.8A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agent_work_report.jsp. Th CVE-2025-154219.8A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/agent_worksadd.jsp of the co CVE-2025-154227.5A flaw has been found in EmpireSoft EmpireCMS up to 8.0. This issue affects the function egetip of the file e/class/connect.php of the compo CVE-2025-154238.8A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSaveTranFiletype of the file e/class/connect CVE-2025-154249.8A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /worksheet/agent_worksdel.jsp of the c CVE-2025-154259.8A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_user.jsp of the co CVE-2025-154267.3A vulnerability was identified in jackying H-ui.admin up to 3.1. This affects an unknown function in the library /lib/webuploader/0.1.5/serv CVE-2025-154288.8A weakness has been identified in UTT 进取 512W 1.7.7-171114. Affected is the function strcpy of the file /goform/formRemoteControl. This mani CVE-2025-154298.8A security vulnerability has been detected in UTT 进取 512W 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /g CVE-2025-15434.3A vulnerability, which was classified as problematic, has been found in iteachyou Dreamer CMS 4.1.3. This issue affects some unknown process