Buffer Overflow in Open5GS v2.7.7

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: MITRE

Description

Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogs_sbi_time_parse() function

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-04

Last Modified

2026-09-04

Generated

2026-09-05

AI Q&A

2026-09-05

EPSS Evaluated

N/A

NVD

CVE-2026-75438

Affected Vendors & Products

Vendor	Product	Version / Range
open5gs	open5gs	2.7.7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Buffer Overflow vulnerability in Open5GS version 2.7.7. It allows a remote attacker to cause a denial of service by exploiting the ogs_sbi_time_parse() function. A buffer overflow occurs when a program writes more data to a buffer than it can hold, potentially crashing the system or allowing arbitrary code execution.

Impact Analysis

If you use Open5GS v2.7.7, a remote attacker could exploit this flaw to disrupt service availability, causing unexpected crashes or downtime. This may lead to loss of network connectivity or service unavailability for users relying on Open5GS.

Mitigation Strategies

Upgrade Open5GS to a version later than v2.7.7 where the ogs_sbi_time_parse() function has been patched to prevent buffer overflow.

Hi! I’m here to help you understand CVE-2026-75438. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70