Buffer Overflow Vulnerability in Open5GS by Open5GS
CVE-2026-75438

7.5HIGH

Key Information:

Vendor

Open5GS

Status
Open5GS
Vendor
CVE Published:
4 September 2026

What is CVE-2026-75438?

A buffer overflow vulnerability in Open5GS version 2.7.7 allows remote attackers to exploit the ogs_sbi_time_parse() function. This could result in a denial of service condition, potentially impacting the availability of the service. The vulnerability arises from improper handling of data leading to memory corruption, enabling malicious users to disrupt normal operation. Users are urged to review the provided references for further insights and mitigation steps.

References

https://github.com/open5gs/open5gs/issues/4612
https://github.com/hackeryounow/5GCVulDB/blob/main/smf_cr...
https://github.com/open5gs/open5gs/commit/7227b2f5b254160...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.