CVE-2026-75438

    Dashboard / Vulnerabilities / CVE-2026-75438

    CVE-2026-75438

    Published: 4 Sept 2026Last Modified: 11 Sept 2026

    Summary:

    Details: Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogs_sbi_time_parse() function

    References: https://gist.github.com/hackeryounow/c299d593b89fd6487cab4182c8aecabf, https://github.com/hackeryounow/5GCVulDB/blob/main/smf_crash_uelocationtimestamp.sh, https://github.com/hackeryounow/5GCVulDB/tree/main/CVE-2026-75438, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/75xxx/CVE-2026-75438.json, https://nvd.nist.gov/vuln/detail/CVE-2026-75438, https://github.com/open5gs/open5gs/issues/4612, https://github.com/open5gs/open5gs/commit/7227b2f5b254160286798e058c189224360d99fc

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -7227b2f5b254160286798e058c189224360d99fc

    Affected versions

    v2.7.7
    v2.7.2
    v2.7.1
    v2.7.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-75438 | CVE-DB