Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-14954

Good to know:

icon

Date: December 19, 2025

A vulnerability has been found in Open5GS up to 2.7.5. Affected is the function ogs_pfcp_pdr_find_or_add/ogs_pfcp_far_find_or_add/ogs_pfcp_urr_find_or_add/ogs_pfcp_qer_find_or_add in the library lib/pfcp/context.c of the component QER/FAR/URR/PDR. The manipulation leads to reachable assertion. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 442369dcd964f03d95429a6a01a57ed21f7779b7. Applying a patch is the recommended action to fix this issue.

Severity Score

Related Resources (9)

https://github.com/open5gs/open5gs/issues/4181#issue-3667069101
https://github.com/open5gs/open5gs/issues/4181#issuecomment-3615646842
https://nvd.nist.gov/vuln/detail/CVE-2025-14954
https://vuldb.com/?ctiid.337590
https://vuldb.com/?submit.716810
https://github.com/open5gs/open5gs/commit/442369dcd964f03d95429a6a01a57ed21f7779b7
https://github.com/open5gs/open5gs/issues/4181
https://vuldb.com/?id.337590
https://www.mend.io/vulnerability-database/CVE-2025-14954

Severity Score

Weakness Type (CWE)

Reachable Assertion

CWE-617

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): HIGH
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us