CVE-2025-9405 MEDIUM

CVE-2025-9405: Open5GS gmm-sm.c gmm_state_exception assertion

Vendor N/A
Product Open5GS
Weakness CWE-617
Published August 25, 2025
Last update August 31, 2025

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A security flaw has been discovered in Open5GS up to 2.7.5. The impacted element is the function gmm_state_exception of the file src/amf/gmm-sm.c. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. The patch is identified as 8e5fed16114f2f5e40bee1b161914b592b2b7b8f. Applying a patch is advised to resolve this issue.

Key dates

02Disclosure timeline

August 25, 2025 CVE published
August 31, 2025 Record updated