← CVE Radar
CVE-2026-15194Open5GS AMF context.c amf_context_final use after free
A security flaw has been discovered in Open5GS 2.7.7. This affects the function amf_context_final of the file src/amf/context.c of the component AMF. Performing a manipulation results in use after free. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks.
4.8 MEDIUMEPSS 0.16%Not in KEVNVD: Deferred
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 4.8 | MEDIUM | 4.0VulDB (CNA) | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P |
| 1.9 | LOW | 4.0VulDB (CNA) | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P |
| 3.3 | LOW | 3.1VulDB (CNA) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| 3.3 | LOW | 3.1VulDB (CNA) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RC:R |
| 3.3 | LOW | 3.0VulDB (CNA) | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RC:R |
| 1.7 | LOW | 2.0VulDB (CNA) | AV:L/AC:L/Au:S/C:P/I:N/A:N |
| 1.7 | LOW | 2.0VulDB (CNA) | AV:L/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:UR |
Details
- CVE ID
- CVE-2026-15194
- Status
- Deferred
- Assigner (CNA)
- VulDB
- Published
- Jul 9, 2026
- Last modified
- 2026-09-03 04:15 UTC
Affected Products
As published by the CNA in the CVE record.
Open5GS1 version range
- 2.7.7
References
- github.com https://github.com/open5gs/open5gs/
- github.com https://github.com/open5gs/open5gs/security/advisories/GHSA-88pq-hpwv-2vjw
- vuldb.com https://vuldb.com/cve/CVE-2026-15194
- vuldb.com https://vuldb.com/submit/851630
- vuldb.com https://vuldb.com/vuln/377122
- vuldb.com https://vuldb.com/vuln/377122/cti