CVE-2026-37198

Deferred Deferred - Pending Action

Integer Overflow in Open5GS SMF Component Leads to DoS

Publication date: 2026-08-27

Last updated on: 2026-09-09

Assigner: MITRE

Description

An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP packet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-27

Last Modified

2026-09-09

Generated

2026-09-17

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-37198

Affected Vendors & Products

Vendor	Product	Version / Range
open5gs	open5gs	2.7.6
open5gs	smf	2.7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

Executive Summary

CVE-2026-37198 is a Denial-of-Service (DoS) vulnerability in Open5GS v2.7.6's SMF component. It occurs due to insufficient validation of GTP packets, including integer overflow or improper handling of Bearer Context information elements. Attackers can exploit this by sending crafted GTP control messages to crash the SMF, disrupting service.

Detection Guidance

Monitor Open5GS SMF logs for crashes or assertion failures during GTP packet processing. Check for malformed GTPv2 messages with invalid version fields (e.g., version 0) or duplicate Bearer Context IEs. Use network traffic analysis tools like Wireshark to inspect GTP control messages for anomalies.

Impact Analysis

This vulnerability allows attackers to disrupt Open5GS services by sending malformed GTP packets. The SMF may crash, causing network outages or service interruptions for users relying on the 5G core network. Systems using Open5GS v2.7.6 are particularly at risk.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA. It is a Denial-of-Service issue in Open5GS v2.7.6 that could disrupt service availability but does not involve data breaches or unauthorized access to sensitive information.

Mitigation Strategies

Upgrade Open5GS to a patched version beyond v2.7.6. Implement strict input validation for GTP packets in the SMF, particularly for version fields and Bearer Context IEs. Filter malformed packets at the network perimeter using firewalls or GTP-aware security devices.

Hi! I’m here to help you understand CVE-2026-37198. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70