CVE-2025-9405

MEDIUM EPSS 43.5%

Published Aug 25, 202510mo ago · Modified Jun 17, 20261w ago

5.5 CVSS 4.0

Medium

Published Aug 25, 2025 10mo ago

Last Modified Jun 17, 2026 1w ago

Description

A security flaw has been discovered in Open5GS up to 2.7.5. The impacted element is the function gmm_state_exception of the file src/amf/gmm-sm.c. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. The patch is identified as 8e5fed16114f2f5e40bee1b161914b592b2b7b8f. Applying a patch is advised to resolve this issue.

CVSS Details

Base Score

5.5

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope X

Threat Intelligence

EPSS Exploit Probability

43.5% percentile

Exploit & Patch Status

Public Exploit Known

Patch Available

Weaknesses 1

CWE-617

Affected Products 1

Vendor	Product	Version	Range
open5gs	open5gs	*	<2.7.6

References 8

github.com https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-9405

Third Party Advisory
github.com https://github.com/open5gs/open5gs/commit/8e5fed16114f2f5e40bee1b161914b592b2b7b8f

Patch
github.com https://github.com/open5gs/open5gs/issues/3947

ExploitIssue Tracking
github.com https://github.com/open5gs/open5gs/issues/3947#issuecomment-3029992728

Issue Tracking
github.com https://github.com/user-attachments/files/21013084/amf_udm-uecm.zip

Product
vuldb.com https://vuldb.com/?ctiid.321241

Permissions RequiredVDB Entry
vuldb.com https://vuldb.com/?id.321241

Third Party AdvisoryVDB Entry
vuldb.com https://vuldb.com/?submit.633467

Third Party AdvisoryVDB Entry

Remediation

github.com https://github.com/open5gs/open5gs/commit/8e5fed16114f2f5e40bee1b161914b592b2b7b8f

Patch