Open5Gs · Open5Gs · CVE-2026-15194
**Name of the Vulnerable Software and Affected Versions**
Open5GS version 2.7.7
**Description**
A use after free flaw exists in the AMF component within the `amf context final()` function located in the src/amf/context.c file. This issue occurs when a specific manipulation is performed and requires local access to be exploited. Use after free is a memory corruption issue where an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.
**Recommendations**
As a temporary workaround, consider restricting access to the `amf context final()` function in the AMF component until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.