Skip to content
Threat Feed
Subscribe

Product

Open5GS (2.8.0)

2 briefs RSS
high threat

Out-of-Bounds Read in Open5GS Rx AA-Request Handler

Open5GS 2.8.0 contains an out-of-bounds read vulnerability in the pcrf_rx_aar_cb function that allows a remote attacker to potentially cause a service crash or information disclosure.

exploited Open5GS cve-2026-78157 denial-of-service memory-corruption
1c
high advisory

Heap-based Buffer Overflow in Open5GS S6a Authentication-Information-Request Handler

Open5GS 2.8.0 contains a remote heap-based buffer overflow vulnerability (CVE-2026-78156) in the S6a Authentication-Information-Request Handler that can be triggered by manipulating the Visited-PLMN-Id argument.

Open5GS
1t 1c