A heap-based buffer overflow vulnerability in Open5GS 2.8.0 poses a high risk of memory corruption and potential system instability.

This vulnerability involves a heap-based buffer overflow and memory corruption flaw. It is accessible to authenticated users with low privileges over a network connection.

The exploitation of this flaw could lead to a denial of service or potential remote code execution, depending on the memory layout. With a CVSS score of 7.4, this is classified as a high-severity issue that could disrupt critical telecommunications infrastructure and lead to unauthorized system behavior.

Immediate Action: Review the provided vendor references and GitHub commit history to apply the upstream fix, as a formal patch version is not explicitly listed.

Proactive Monitoring: Monitor system logs for unexpected crashes or service restarts in the Open5GS daemon, which may indicate exploitation attempts.

Compensating Controls: Implement network segmentation to restrict access to the Open5GS service to only authorized and trusted endpoints.

Public Exploit Available: Unknown

Given the high severity of this memory corruption vulnerability, administrators should prioritize the review of the linked GitHub commit to implement the necessary code changes. Testing should be performed in a staging environment before deploying the fix to production systems to ensure continued service availability.