CVE-2026-116543

Name of the Vulnerable Software and Affected Versions Open5GS versions 1.3.0 through 2.8.0

Description A heap out-of-bounds write occurs in the parse multipart() function. Unauthenticated attackers can corrupt memory by providing an empty multipart boundary. By sending a single crafted multipart/related request to the SBI (Service Based Interface) of any network function, the lookbehind buffer is overflowed, leading to a system crash.

Recommendations Update Open5GS to a version later than 2.8.0. As a temporary mitigation, restrict access to the SBI interface to trusted sources only.