CVE-2024-34475: OPEN5GS

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmm_state_authentication in amf/gmm-sm.c for != OGS_ERROR.

Affected products

• OPEN5GS OPEN5GS: before 2.7.1 (fixed in 2.7.1)

Published 2024-05-05. Last modified 2026-06-17.