CVE-2025-15531
Open5GS context.c sgwc_bearer_add assertion
- State
- Published
- Severity
- 6.9 Medium
- Published
- Jan 17, 2026
- Updated
- Feb 23, 2026
- Reserved
- Jan 16, 2026
Description
A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the file src/sgwc/context.c. The manipulation leads to reachable assertion. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The issue report is flagged as already-fixed.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C | VulDB |
| 3.0 | 5.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C | VulDB |
Weaknesses
- CWE-617 Reachable Assertion
Affected Products
| Product | Versions |
|---|---|
Open5GSn/a |
|
References
- VDB-341598 | Open5GS context.c sgwc_bearer_add assertionvdb-entrytechnical-description
- VDB-341598 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #729339 | Open5GS SGWC v2.7.6 Denial of Servicethird-party-advisory
- https://github.com/open5gs/open5gs/issues/4233issue-tracking
- https://github.com/open5gs/open5gs/issues/4233#issue-3776216182exploitissue-tracking
- https://github.com/open5gs/open5gs/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.