Denial of Service Vulnerability in Open5GS by Open5GS

CVE-2025-25774

What is CVE-2025-25774?

A vulnerability has been identified in Open5GS v2.7.2 where a User Equipment (UE) performs a handover request at an inopportune moment during a transition between gNodeBs (gNBs). This specific timing can trigger an exception in the Access and Mobility Management Function (AMF) internal state machine, leading to an unexpected crash of the AMF. As a result, this may result in a Denial of Service, hindering the ability for legitimate users to access network services. Users and organizations using this software should assess their exposure and implement necessary mitigations.

References