CVE-2025-7485

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-7485

3.3 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

1.7 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:S/C:N/I:N/A:P

Exploitability : 3.1 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

A

vulnerability classified as problematic was found in Open5GS up to 2.7.3. Affected by this vulnerability is the function ngap_recv_handler/s1ap_recv_handler/recv_handler of the component SCTP Partial Message Handler. The manipulation leads to reachable assertion. The attack needs to be approached locally. The patch is named cfa44575020f3fb045fd971358442053c8684d3d. It is recommended to apply a patch to fix this issue.

References
Link Resource
https://github.com/open5gs/open5gs/commit/cfa44575020f3fb045fd971358442053c8684d3d Patch
https://github.com/open5gs/open5gs/issues/3878#issuecomment-2853775136 Issue Tracking
https://github.com/open5gs/open5gs/issues/3878/ Exploit Issue Tracking Third Party Advisory
https://vuldb.com/?ctiid.316135 Permissions Required VDB Entry Third Party Advisory
https://vuldb.com/?id.316135 Third Party Advisory VDB Entry
https://vuldb.com/?submit.610601 Third Party Advisory VDB Entry
https://github.com/open5gs/open5gs/issues/3878#issuecomment-2853775136 Issue Tracking
https://github.com/open5gs/open5gs/issues/3878/ Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*
History

25 Aug 2025, 16:49

Type Values Removed Values Added
First Time Open5gs
Open5gs open5gs
CPE cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*
References () https://github.com/open5gs/open5gs/commit/cfa44575020f3fb045fd971358442053c8684d3d - () https://github.com/open5gs/open5gs/commit/cfa44575020f3fb045fd971358442053c8684d3d - Patch
References () https://github.com/open5gs/open5gs/issues/3878#issuecomment-2853775136 - () https://github.com/open5gs/open5gs/issues/3878#issuecomment-2853775136 - Issue Tracking
References () https://github.com/open5gs/open5gs/issues/3878/ - () https://github.com/open5gs/open5gs/issues/3878/ - Exploit, Issue Tracking, Third Party Advisory
References () https://vuldb.com/?ctiid.316135 - () https://vuldb.com/?ctiid.316135 - Permissions Required, VDB Entry, Third Party Advisory
References () https://vuldb.com/?id.316135 - () https://vuldb.com/?id.316135 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.610601 - () https://vuldb.com/?submit.610601 - Third Party Advisory, VDB Entry

14 Jul 2025, 17:15

Type Values Removed Values Added
Summary
  • (es) Se detectó una vulnerabilidad clasificada como problemática en Open5GS hasta la versión 2.7.3. Esta vulnerabilidad afecta la función ngap_recv_handler/s1ap_recv_handler/recv_handler del componente SCTP Partial Message Handler. La manipulación genera una aserción accesible. El ataque debe abordarse localmente. El parche se llama cfa44575020f3fb045fd971358442053c8684d3d. Se recomienda aplicar un parche para solucionar este problema.
References () https://github.com/open5gs/open5gs/issues/3878#issuecomment-2853775136 - () https://github.com/open5gs/open5gs/issues/3878#issuecomment-2853775136 -
References () https://github.com/open5gs/open5gs/issues/3878/ - () https://github.com/open5gs/open5gs/issues/3878/ -

12 Jul 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-12 19:15

Updated : 2025-08-25 16:49

NVD link : CVE-2025-7485

Mitre link : CVE-2025-7485

CVE.ORG link : CVE-2025-7485

JSON object : View

Products Affected

open5gs

CWE
CWE-617

Reachable Assertion