CVE-2025-8804
Medium
Description
A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ngap_build_downlink_nas_transport of the component AMF. The manipulation leads to reachable assertion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The identifier of the patch is bca0a7b6e01d254f4223b83831162566d4626428. It is recommended to upgrade the affected component.
SeverityMedium
CVSS5.3
Exploit probability—
ProductOpen5gs
PublishedAug 10, 2025
First seenAug 10, 2025
Weakness typeCWE-617CWE-617
How to fix
Update
- open5gs open5gs2.7.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| open5gs open5gs | v < 2.7.6 | 2.7.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.