Security Advisory

CVE-2025-29339

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-04-22 00:00:00

Last updated 2025-04-23 13:36:39

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation. When processing a PFCP Session Establishment Request with PDN Type=0, the UPF fails to handle the invalid value propagated from SMF (or via direct attack), triggering a fatal assertion check and causing a daemon crash.

← Browse all CVEs View on cve.org ↗