Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-92417

Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereference

CVSS 4.0 7.1 HIGHCVSS 3.1 6.5 MEDIUMCVSS 3.0 6.5 MEDIUMCVSS 2.0 6.8 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-92417

Published

A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack may be launched remotely. The patch is identified as 8f07b507b78ff94776f2cd49276eb116ed93d7f2. A patch should be applied to remediate this issue.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-92417

Published

Open5GS

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "n/a",
                    "product": "Open5GS",
                    "versions": [
                        {
                            "version": "2.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.1",
                            "status": "affected"
                        },
                        {
                            "version": "2.2",
                            "status": "affected"
                        },
                        {
                            "version": "2.3",
                            "status": "affected"
                        },
                        {
                            "version": "2.4",
                            "status": "affected"
                        },
                        {
                            "version": "2.5",
                            "status": "affected"
                        },
                        {
                            "version": "2.6",
                            "status": "affected"
                        },
                        {
                            "version": "2.7",
                            "status": "affected"
                        },
                        {
                            "version": "2.8.0",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "PFCP Handler"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON