CVE-2025-8803

MEDIUM

open5gs < 2.7.6 - Denial of Service in AMF gmm_state_de_registered Function

Title source: llm
STIX 2.1

Description

A vulnerability has been found in Open5GS up to 2.7.5. Affected is the function gmm_state_de_registered/gmm_state_exception of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 2.7.6 is able to address this issue. The name of the patch is 1f30edac27f69f61cff50162e980fe58fdeb30ca. It is recommended to upgrade the affected component.

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.319332
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.319332
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.626123
Issue Tracking issue-tracking
https://github.com/open5gs/open5gs/issues/3948

Scores

CVSS v3 5.3
EPSS 0.0054
EPSS Percentile 41.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-404
Status published
Products (1)
open5gs/open5gs < 2.7.6
Published Aug 10, 2025
Tracked Since Feb 18, 2026