VULNERABILITY INTELLIGENCE

CVE-2025-29339

CVSS score7.5 HIGH
EPSS probability0.79%
CISA KEVNot currently listed
Published2025-04-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation. When processing a PFCP Session Establishment Request with PDN Type=0, the UPF fails to handle the invalid value propagated from SMF (or via direct attack), triggering a fatal assertion check and causing a daemon crash.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-617

Primary references