Buffer Overflow Vulnerability in PFCP Library of Open5GS

CVE-2025-44952

What is CVE-2025-44952?

A vulnerability in the PFCP library of Open5GS allows local attackers to exploit a missing length check in the ogs_pfcp_subnet_add function. By manipulating the session.dnn field to exceed the expected length of 101, an attacker can trigger a buffer overflow, potentially leading to unauthorized access or system instability. This impacts Open5GS versions 2.7.2 and earlier, highlighting the importance of secure coding practices to mitigate such risks.

References