This vulnerability affects Open5GS up to version 2.7.7 in the handle_amf_info function within the /lib/sbi/nnrf-handler.c file of the nf-instances Endpoint component. An attacker can remotely manipulate the nf_info_pool argument, leading to resource consumption on the affected system. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. The issue has been publicly disclosed and is flagged as already fixed, though no explicit patch link or vendor advisory is provided in the data.

Successful exploitation of this vulnerability can cause resource consumption on the affected Open5GS system, potentially degrading service availability or performance. There is no indication of privilege escalation, data disclosure, or code execution. The attack can be performed remotely without user interaction, increasing the risk of exploitation.

The vulnerability is reported as already fixed. Applying the official patch or upgrading Open5GS to a version later than 2.7.7 is advised to resolve this issue. Since no explicit patch link or vendor advisory is provided, users should consult the official Open5GS project resources or security advisories for the relevant fix. Patch status is not yet confirmed from a vendor advisory in this data; therefore, verify the current remediation guidance from the vendor.