CVE-2026-108105

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.1

Description A reachable assertion issue exists in the mme gn handle sgsn context request() function. Remote unauthenticated attackers can cause the MME to crash by sending malformed SGSN Address IEs via GTPv1-C traffic from a configured SGSN address using a known UE IMSI or P-TMSI. By providing an invalid address length, an attacker can terminate the open5gs-mmed process, resulting in a denial of service for all subscribers.

Recommendations Update to version 2.8.1 or later.