CVE-2025-29339

An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation. When processing a PFCP Session Establishment Request with PDN Type=0, the UPF fails to handle the invalid value propagated from SMF (or via direct attack), triggering a fatal assertion check and causing a daemon crash.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2025-04-22

Last modified

2025-04-23

Weaknesses

CWE-617

Affected products

• Open5gs (Open5gs)

References

• https://github.com/open5gs/open5gs/issues/3727