| Title | Open5GS <=2.7.3 Reachable Assertion |
|---|
| Description | Open5GS AMF ≤ 2.7.3 contains a reachable assertion flaw in gmm_state_authentication when handling registration and deregistration after an incomplete handover and re-registration. Due to a stale ran_ue reference, the AMF may trigger a fatal assertion (ogs_assert) and crash. |
|---|
| Source | ⚠️ https://github.com/open5gs/open5gs/issues/3910 |
|---|
| User | SQ0409 (UID 85579) |
|---|
| Submission | 05/21/2025 11:40 (11 months ago) |
|---|
| Moderation | 06/03/2025 11:20 (13 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 310956 [Open5GS up to 2.7.3 AMF/MME gmm_state_authentication/emm_state_authentication assertion] |
|---|
| Points | 18 |
|---|