CVE-2021-41794

ogs_fqdn_parse in Open5GS 1.0.0 through 2.3.3 inappropriately trusts a client-supplied length value, leading to a buffer overflow. The attacker can send a PFCP Session Establishment Request with "internet" as the PDI Network Instance. The first character is interpreted as a length value to be used in a memcpy call. The destination buffer is only 100 bytes long on the stack. Then, 'i' gets interpreted as 105 bytes to copy from the source buffer to the destination buffer.

• CWE-120

• https://research.nccgroup.com/2021/10/06/technical-advisory-open5gs-stack-buffer-overflow-during-pfcp-session-establishment-on-upf-cve-2021-41794Exploit, Third Party Advisory
• https://research.nccgroup.com/2021/10/06/technical-advisory-open5gs-stack-buffer-overflow-during-pfcp-session-establishment-on-upf-cve-2021-41794Exploit, Third Party Advisory

Published

Oct 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41788MediaTek microchips, as used in NETGEAR devices through 2021…7.5
• CVE-2021-41789In wifi driver, there is a possible system crash due to a mi…6.5
• CVE-2021-4179livehelperchat is vulnerable to Improper Neutralization of I…5.4
• CVE-2021-41790An issue was discovered in Hyland org.alfresco:alfresco-cont…8.8
• CVE-2021-41791An issue was discovered in Hyland org.alfresco:share through…5.4
• CVE-2021-41792An issue was discovered in Hyland org.alfresco:alfresco-cont…5.3
• CVE-2021-41795The Safari app extension bundled with 1Password for Mac 7.7.…6.5
• CVE-2021-41796Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-41797Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-41798MediaWiki before 1.36.2 allows XSS. Month related MediaWiki …6.1
• CVE-2021-41799MediaWiki before 1.36.2 allows a denial of service (resource…7.5
• CVE-2021-4180An information exposure flaw in openstack-tripleo-heat-templ…4.3