CVE-2026-108102

Medium

Description

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_volume_measurement() in lib/pfcp/types.c that allows remote unauthenticated attackers to read past IE buffers. Attackers can send a PFCP Session Report Request to the SMF on UDP port 8805 with a short, all-flags Volume Measurement IE, reading up to 48 bytes and potentially crashing the SMF.

SeverityMedium

CVSS5.3

Exploit probability—

ProductOpen5gs

PublishedOct 9, 2026

First seenOct 9, 2026

Weakness typeCWE-125Out-of-bounds read

How to fix

Patches

github.com/open5gs/open5gs/commit/88e64fc1f87e0d321364b3bb710ef6a8f274e568

Vendor advisories

github.com/open5gs/open5gs/security/advisories/GHSA-37c3-hv4f-688p

Affected products

Product	Affected versions	Fixed in
open5gs open5gs	v ≤ 2.8.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.