A flaw has been found in Open5GS up to 2.7.5. This impacts the function ogs_pfcp_handle_create_pdr in the library lib/pfcp/handler.c of the component FAR-ID Handler. Executing manipulation can lead to null pointer dereference. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is said to be difficult. The exploit has been published and may be used. This patch is called 93a9fd98a8baa94289be3b982028201de4534e32. It is advisable to implement a patch to correct this issue.
References
| Link | Resource |
|---|---|
| https://github.com/open5gs/open5gs/commit/93a9fd98a8baa94289be3b982028201de4534e32 | Patch |
| https://github.com/open5gs/open5gs/issues/4179 | Exploit Issue Tracking Vendor Advisory |
| https://github.com/open5gs/open5gs/issues/4179#issue-3666399406 | Exploit Issue Tracking Vendor Advisory |
| https://github.com/open5gs/open5gs/issues/4179#issuecomment-3614868758 | Issue Tracking |
| https://vuldb.com/?ctiid.337589 | Permissions Required VDB Entry |
| https://vuldb.com/?id.337589 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.716799 | Third Party Advisory VDB Entry |
Configurations
History
24 Dec 2025, 16:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/open5gs/open5gs/commit/93a9fd98a8baa94289be3b982028201de4534e32 - Patch | |
| References | () https://github.com/open5gs/open5gs/issues/4179 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://github.com/open5gs/open5gs/issues/4179#issue-3666399406 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://github.com/open5gs/open5gs/issues/4179#issuecomment-3614868758 - Issue Tracking | |
| References | () https://vuldb.com/?ctiid.337589 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.337589 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.716799 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:* | |
| First Time |
Open5gs open5gs
Open5gs |
19 Dec 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-19 16:15
Updated : 2025-12-24 16:09
NVD link : CVE-2025-14953
Mitre link : CVE-2025-14953
CVE.ORG link : CVE-2025-14953
JSON object : View
Products Affected
open5gs
- open5gs