CVE-2025-15418

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function ogs_gtp2_parse_bearer_qos in the library lib/gtp/v2/types.c of the component Bearer QoS IE Length Handler. Performing a manipulation results in denial of service. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is named 4e913d21f2c032b187815f063dbab5ebe65fe83a. To fix this issue, it is recommended to deploy a patch.

• CWE-404

• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/commit/4e913d21f2c032b187815f063dbab5ebe65fe83aPatch
• https://github.com/open5gs/open5gs/issues/4217Exploit, Issue Tracking, Vendor Advisory
• https://github.com/open5gs/open5gs/issues/4217#issue-3759615968Exploit, Issue Tracking, Vendor Advisory
• https://github.com/open5gs/open5gs/issues/4217#issuecomment-3690767105Exploit, Issue Tracking, Vendor Advisory
• https://vuldb.com/?ctiid.339340Permissions Required, VDB Entry
• https://vuldb.com/?id.339340Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.728043Third Party Advisory, VDB Entry
• https://github.com/open5gs/open5gs/issues/4217Exploit, Issue Tracking, Vendor Advisory
• https://github.com/open5gs/open5gs/issues/4217#issue-3759615968Exploit, Issue Tracking, Vendor Advisory
• https://github.com/open5gs/open5gs/issues/4217#issuecomment-3690767105Exploit, Issue Tracking, Vendor Advisory

Published

Jan 2, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15412A security vulnerability has been detected in WebAssembly wa…7.8
• CVE-2025-15413A vulnerability was detected in wasm3 up to 0.5.0. Impacted …7.8
• CVE-2025-15414A flaw has been found in go-sonic sonic up to 1.1.4. The aff…4.7
• CVE-2025-15415A vulnerability has been found in xnx3 wangmarket up to 6.4.…5.4
• CVE-2025-15416A vulnerability was found in xnx3 wangmarket up to 6.4. This…5.4
• CVE-2025-15417A vulnerability was identified in Open5GS up to 2.7.6. Affec…5.5
• CVE-2025-15419A weakness has been identified in Open5GS up to 2.7.6. Affec…5.5
• CVE-2025-1542Improper permission control vulnerability in the OXARI Servi…9.3
• CVE-2025-15420A security vulnerability has been detected in Yonyou KSOA 9.…9.8
• CVE-2025-15421A vulnerability was detected in Yonyou KSOA 9.0. This vulner…9.8
• CVE-2025-15422A flaw has been found in EmpireSoft EmpireCMS up to 8.0. Thi…7.5
• CVE-2025-15423A vulnerability has been found in EmpireSoft EmpireCMS up to…8.8