This vulnerability in Open5GS 2.7.7 involves a use-after-free condition in the amf_context_final function within the AMF component (src/amf/context.c). An attacker with local access can manipulate the system to trigger this flaw, potentially causing memory corruption. The CVSS 4.0 base score is 4.8, reflecting low attack complexity and privileges required but limited impact scope. Exploit code has been publicly released, increasing the risk of exploitation. No vendor advisory or patch information is currently available.

Successful exploitation can lead to use-after-free memory corruption, which may cause application instability or crashes. The attack requires local access and low privileges, limiting remote exploitation. There is no indication of privilege escalation, data disclosure, or denial of service beyond potential application disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious activity related to the AMF component. Avoid running vulnerable versions in untrusted environments.