5.3
Medium
CVE-2026-78157 A vulnerability was detected in Open5GS 2.8.0
Description
A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named c18dc6938bf63cc7374315d3dca303d92066e746. To fix this issue, it is recommended to deploy a patch.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Open5GS | 2.8.0 | No fix stated |
References
- VDB-394540 | Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds vuldb.com
- VDB-394540 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- CVE-2026-78157 | CVE Analysis and Report vuldb.com
- Submit #882953 | Open5GS 2.8.0 Out-of-Bounds Read vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Open5GS
The 125 CVEs of Open5GS →
CVE-2026-107166
A weakness has been identified in Open5GS up to 2.7.7
6.9
Medium
CVE-2026-92417
A vulnerability was found in Open5GS up to 2.8.0
7.1
High
CVE-2026-92416
A vulnerability has been found in Open5GS up to 2.8.0
5.3
Medium
CVE-2026-91855
A security flaw has been discovered in Open5GS up to 2.7.7
6.9
Medium