CVE-2025-65805: Buffer Overflow
OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote attackers can launch a denial-of-service attack and potentially execute malicious code by accessing port N1 and sending an imsi string longer than 1000 to AMF.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65805?
CVE-2025-65805 is considered a critical vulnerability due to its potential to allow remote denial-of-service attacks and arbitrary code execution.
How do I fix CVE-2025-65805?
To mitigate CVE-2025-65805, upgrade OpenAirInterface CN5G AMF to version 2.2.0 or later that addresses this buffer overflow vulnerability.
What kind of attacks can CVE-2025-65805 be exploited for?
CVE-2025-65805 can be exploited to launch denial-of-service attacks and potentially execute malicious code on the affected system.
Which versions of OpenAirInterface CN5G AMF are affected by CVE-2025-65805?
All versions of OpenAirInterface CN5G AMF up to and including v2.1.9 are affected by CVE-2025-65805.
What is the cause of the CVE-2025-65805 vulnerability?
CVE-2025-65805 is caused by a buffer overflow that occurs when processing NAS messages with excessively long imsi strings.