CVE-2026-15194

Name of the Vulnerable Software and Affected Versions Open5GS version 2.7.7

Description A use after free flaw exists in the AMF component within the amf context final() function located in the src/amf/context.c file. This issue occurs when a specific manipulation is performed and requires local access to be exploited. Use after free is a memory corruption issue where an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations As a temporary workaround, consider restricting access to the amf context final() function in the AMF component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.