CVE-2026-37198: Integer Overflow
Published Aug 27, 2026
·Updated
An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP packet.
Affected Software
1 affected component
open5gs SMF component=2.7.6
Event History
Aug 27, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:17 PM
Description
Frequently Asked Questions
1
Which deployments are exposed to this issue?
Deployments using the SMF component in Open5GS v2.7.6 are affected. The available information does not identify any configuration-specific prerequisite or exclusion.
2
What does an attacker need to do to trigger the vulnerability?
An attacker needs to supply a crafted GTP packet to the affected SMF component. The reported impact is denial of service caused by an integer overflow.
3
Is there a documented workaround if an update cannot be applied immediately?
No workaround or mitigation is provided in the available information. Limiting exposure of the SMF's GTP packet interfaces to trusted and necessary peers may reduce opportunities for untrusted crafted packets, but this is not documented as a complete mitigation.