CVE-2025-44952: Buffer Overflow
A missing length check in ogspfcpsubnetadd function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local attacker to cause a Buffer Overflow by changing the session.dnn field with a value with length greater than 101.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-44952?
CVE-2025-44952 is classified as a high severity vulnerability due to its potential to cause a Buffer Overflow.
How do I fix CVE-2025-44952?
To fix CVE-2025-44952, update the Open5GS software to version 2.7.3 or later, which addresses the missing length check.
What systems are affected by CVE-2025-44952?
CVE-2025-44952 affects Open5GS PFCP library, smf, and upf versions up to 2.7.2.
Can CVE-2025-44952 be exploited remotely?
CVE-2025-44952 primarily requires local access to exploit the Buffer Overflow vulnerability.
What is the cause of CVE-2025-44952?
CVE-2025-44952 is caused by a missing length check in the ogs_pfcp_subnet_add function within the PFCP library.