CNNVD-202508-3012 Information

Aug 25, 2025 cve

CNNVD ID

CNNVD-202508-3012

CVE-2025-9405

CNNVD Published: 2025-08-25

Description (Chinese)

Open5GS是Open5GS开源的一个 5G Core 和 Epc 的 C 语言开源实现，即 Lte/Nr 网络的核心网络。 Open5GS 2.7.5及之前版本存在安全漏洞，该漏洞源于文件src/amf/gmm-sm.c中gmm_state_exception函数存在可达断言。

Description (English)

Open5GS is a 5G Core and Epc open-language C open source of Open5GS, the core network of the Lte/Nr network. Open5GS 2.7.5 and previous versions contain a security loophole, which stems from the existence of an asserted gmm state exception function in document src/amf/gmm-sm.c.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Open5GS

Published

2025-08-25

Last Modified

2026-02-24

References

https://vuldb.com/?submit.633467 https://github.com/open5gs/open5gs/issues/3947#issuecomment-3029992728 https://vuldb.com/?id.321241 https://vuldb.com/?ctiid.321241 https://github.com/user-attachments/files/21013084/amf_udm-uecm.zip https://github.com/open5gs/open5gs/commit/8e5fed16114f2f5e40bee1b161914b592b2b7b8f https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-9405 https://access.redhat.com/security/cve/cve-2025-9405 https://nvd.nist.gov/vuln/detail/CVE-2025-9405

Patch

https://open5gs.org/

Share on: