Integer Overflow in Open5GS SMF Component Leads to DoS

Publication date: 2026-08-27

Last updated on: 2026-08-27

Assigner: MITRE

Description

An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP packet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-27

Last Modified

2026-08-27

Generated

2026-08-28

AI Q&A

2026-08-28

EPSS Evaluated

N/A

NVD

CVE-2026-37198

Affected Vendors & Products

Vendor	Product	Version / Range
open5gs	open5gs	2.7.6
open5gs	smf	2.7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

CVE-2026-37198 is a Denial-of-Service (DoS) vulnerability in Open5GS v2.7.6's SMF component. It occurs due to insufficient validation of GTP packets, including integer overflow or improper handling of Bearer Context information elements. Attackers can exploit this by sending crafted GTP control messages to crash the SMF, disrupting service.

Impact Analysis

This vulnerability allows attackers to disrupt Open5GS services by sending malformed GTP packets. The SMF may crash, causing network outages or service interruptions for users relying on the 5G core network. Systems using Open5GS v2.7.6 are particularly at risk.

Hi! I’m here to help you understand CVE-2026-37198. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70