This vulnerability resides in the lib/sbi/nnrf-handler.c file of the Shared NF-profile Parser component of Open5GS. Manipulation of an unknown part of this library triggers a denial of service, causing the system to become unresponsive. The failure occurs when the component processes a crafted request, which leads to a crash or hung state. The exploit is available publicly and can be executed remotely against exposed network interfaces.

Affected products are the Open5GS project, specifically any deployment of Open5GS up to version 2.7.7. The problem arises in the Shared NF-profile Parser module and therefore applies to installations that use the default configuration for the nNfR component.

The CVSS score of 5.3 places this issue in the medium severity range. EPSS data is unavailable, but the public availability of the exploit and the remote attack vector indicate a realistic threat. Because it is not listed in the CISA KEV catalog, the exposure is not currently monitored by that program, but the vulnerability remains actionable. The risk can be mitigated by applying the official patch or upgrading to a newer release where the flaw is corrected.