CVE-2025-14955

The record

A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ogs_pfcp_handle_create_pdr in the library lib/pfcp/handler.c of the component PFCP. The manipulation results in improper initialization. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitation appears to be difficult. The exploit has been made public and could be used. The patch is identified as 773117aa5472af26fc9f80e608d3386504c3bdb7. It is best practice to apply a patch to resolve this issue.

Affected packages

Related vulnerabilities

• CVE-2026-87616 Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36… CWE-665
• CVE-2026-78940 Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a… CWE-665
• CVE-2026-12233 The PSA Protected Storage credential backend (subsys/net/lib/tls_credentials/tls_credenti… CWE-665
• CVE-2026-54777 CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET… CWE-665
• CVE-2026-54409 A malicious actor with access to the network and under certain conditions could exploit… CWE-665
• CVE-2026-54279 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. CWE-665
• GHSA-cmwh-pvxp-8882 DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook… CWE-665
• CVE-2026-12539 Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at… CWE-665