Medium severity5.3NVD Advisory· Published Aug 25, 2025· Updated Jun 17, 2026

CVE-2025-9405

Description

A security flaw has been discovered in Open5GS up to 2.7.5. The impacted element is the function gmm_state_exception of the file src/amf/gmm-sm.c. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. The patch is identified as 8e5fed16114f2f5e40bee1b161914b592b2b7b8f. Applying a patch is advised to resolve this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Open5gs/Open5gsv53 versions
2.7.0+ 2 more
- (no CPE)range: 2.7.0
- (no CPE)range: <=2.7.5
- cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*range: <2.7.6

Patches

Vulnerability mechanics

References

github.com/open5gs/open5gs/commit/8e5fed16114f2f5e40bee1b161914b592b2b7b8fnvdPatch
github.com/open5gs/open5gs/issues/3947nvdExploitIssue Tracking
github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-9405nvdThird Party Advisory
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
github.com/open5gs/open5gs/issues/3947nvdIssue Tracking
vuldb.comnvdPermissions RequiredVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000