Open5GS 2.7.7 contains a use-after-free vulnerability in the amf_context_final function within the src/amf/context.c file of the AMF component. This vulnerability can be triggered by a local attacker who can manipulate the function to cause use-after-free memory corruption. The vulnerability is assigned CVE-2026-15194 and has a CVSS 4.8 (medium severity). There is no vendor advisory or patch information available at this time. Exploit code has been publicly disclosed.

The vulnerability allows a local attacker with limited privileges to cause use-after-free conditions, potentially leading to memory corruption. This could result in application instability or crashes. There is no indication of privilege escalation, remote exploitation, or data confidentiality/integrity impact from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only to reduce risk. Monitor for vendor updates regarding patches or mitigations.