CVE-2024-40129

CRITICAL

Open5GS v2.6.4 - Heap-based Buffer Overflow in /lib/pfcp/context.c

Title source: llm

Open5GS v2.6.4 is vulnerable to Buffer Overflow. via /lib/pfcp/context.c.

Core 2

Core References

Patch

Exploit, Issue Tracking, Third Party Advisory

CVSS v3 9.8

EPSS 0.0046

EPSS Percentile 36.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

CWE

CWE-122 CWE-787

Status published

Products (1)

open5gs/open5gs 2.6.4

Published Jul 16, 2024

Tracked Since Feb 18, 2026