Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-41067

Reachable Assertion vulnerability in Open5GS

Description

Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. An SBI request that deletes the NRF's own registry causes a check that ends up crashing the NRF process and renders the discovery service unavailable.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NewPlane Open5GS

Default version status: unaffected

  • 0 to ≤ 2.7.5affected

References