CVE-2026-8252: Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference
A vulnerability was determined in Open5GS up to 2.7.7. Affected is the function smfnsmfhandlecreatedatainhsmf of the component SMF. Executing a manipulation can lead to null pointer dereference. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8252?
CVE-2026-8252 is classified as a high severity vulnerability due to its potential exploitation leading to application crashes.
How do I fix CVE-2026-8252?
To fix CVE-2026-8252, update Open5GS to version 2.7.8 or later, which addresses the null pointer dereference issue.
What component is affected by CVE-2026-8252?
CVE-2026-8252 affects the SMF (Session Management Function) component of Open5GS.
What can be exploited in CVE-2026-8252?
CVE-2026-8252 can be exploited through a manipulation that leads to a null pointer dereference.
What versions of Open5GS are vulnerable to CVE-2026-8252?
Open5GS versions up to and including 2.7.7 are vulnerable to CVE-2026-8252.