CVE-2026-116544mediumCWE-125

CVE-2026-116544: fallo de gravedad media en open5gs

Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse_scheme_output

Publicada el

Seguir esta CVE+ Monitorear Open5GS

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.3epss 0.4%
Open5GS 2.6.1 through 2.8.0 contains an out-of-bounds read vulnerability in parse_scheme_output() in lib/sbi/conv.c during SUCI de-concealment due to incomplete length validation. Remote unauthenticated UEs or SBI peers can submit a crafted SUCI with a 42-byte scheme output to a UDM, triggering a heap over-read past the buffer.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
open5gs · open5gs
CVEs relacionadas — open5gs

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-15720HIGHPre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handlerEPSS 0.5%CVE-2026-108105HIGHOpen5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context RequestEPSS 0.5%CVE-2026-116543HIGHOpen5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart ParserEPSS 0.4%CVE-2026-108103MEDIUMOpen5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IEEPSS 0.4%CVE-2026-108102MEDIUMOpen5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IEEPSS 0.4%