An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation. When processing a PFCP Session Establishment Request with PDN Type=0, the UPF fails to handle the invalid value propagated from SMF (or via direct attack), triggering a fatal assertion check and causing a daemon crash.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/open5gs/open5gs/issues/3727 | Exploit Issue Tracking Vendor Advisory |
Configurations
History
19 Jun 2025, 00:23
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:* | |
| First Time |
Open5gs open5gs
Open5gs |
|
| References | () https://github.com/open5gs/open5gs/issues/3727 - Exploit, Issue Tracking, Vendor Advisory |
22 Apr 2025, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-22 17:16
Updated : 2025-06-19 00:23
NVD link : CVE-2025-29339
Mitre link : CVE-2025-29339
JSON object : View
Products Affected
open5gs
- open5gs
CWE
No CWE.