Heap Out-of-Bounds Read Vulnerability in Open5GS by Open5GS
CVE-2026-108102

6.9MEDIUM

Key Information:

Vendor

Open5gs

Status
Open5gs
Vendor
CVE Published:
9 October 2026

What is CVE-2026-108102?

The vulnerability discovered in Open5GS versions up to 2.8.0 involves a heap out-of-bounds read caused by improper handling of Volume Measurement Information Elements (IEs). Remote unauthenticated attackers can exploit this flaw by sending specially crafted PFCP Session Report Requests to the Session Management Function (SMF) on UDP port 8805. This exploitation allows attackers to read beyond the intended memory buffer, potentially exposing sensitive information or crashing the SMF service.

Affected Version(s)

open5gs 0 <= 2.8.0

References

https://github.com/open5gs/open5gs/commit/88e64fc1f87e0d3...
patch
https://github.com/open5gs/open5gs
product
https://github.com/open5gs/open5gs/security/advisories/GH...
vendor-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tristan Madani
.