CVE-2025-8805CWE-404

Open5GS SMF gsm-sm.c smf_gsm_state_wait_pfcp_deletion denial of service

Medium · published August 10, 2025

CVSS v4.0
6.9
EPSS
1%
Percentile
54.7
In the wild
Unconfirmed
What it is

A vulnerability was determined in Open5GS up to 2.7.5. Affected by this issue is the function smf_gsm_state_wait_pfcp_deletion of the file src/smf/gsm-sm.c of the component SMF. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The patch is identified as c58b8f081986aaf2a312d73a0a17985518b47fe6. It is recommended to upgrade the affected component.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00758 · 54.7th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2025-08-10T10:32Z
EPSS history
Timeline
  • 10 AUG 10:32Z
    Open5GS SMF gsm-sm.c smf_gsm_state_wait_pfcp_deletion denial of service
    cvelistv5