CVE-2025-55904
Medium
Description
Open5GS v2.7.5, prior to commit 67ba7f92bbd7a378954895d96d9d7b05d5b64615, is vulnerable to a NULL pointer dereference when a multipart/related HTTP POST request with an empty HTTP body is sent to the SBI of either AMF, AUSF, BSF, NRF, NSSF, PCF, SMF, UDM, or UDR, resulting in a denial of service. This occurs in the parse_multipart function in lib/sbi/message.c.
SeverityMedium
CVSS4.0
Exploit probability—
ProductOpen5gs
PublishedSep 17, 2025
First seenSep 17, 2025
Weakness typeCWE-476NULL pointer dereference
How to fix
Update
- open5gs open5gs2.7.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| open5gs open5gs | v < 2.7.6 | 2.7.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.