Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 02:18:39 +0000 CVE-2026-108102 — Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE https://vulnerability.circl.lu/vuln/cve-2026-108102 <p><strong>Affected:</strong> open5gs</p> <p>Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_volume_measurement() in lib/pfcp/types.c that allows remote unauthenticated attackers to read past IE buffers. Attackers can send a PFCP Session Report Request to the SMF on UDP port 8805 with a short, all-flags Volume Measurement IE, reading up to 48 bytes and potentially crashing the SMF.</p> <p><strong>Affected:</strong> open5gs</p> <p>Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_volume_measurement() in lib/pfcp/types.c that allows remote unauthenticated attackers to read past IE buffers. Attackers can send a PFCP Session Report Request to the SMF on UDP port 8805 with a short, all-flags Volume Measurement IE, reading up to 48 bytes and potentially crashing the SMF.</p> https://vulnerability.circl.lu/vuln/cve-2026-108102