This vulnerability in Open5GS (up to version 2.7.7) involves the amf_namf_callback_handle_sdm_data_change_notify function within the AMF SBI Endpoint. Improper handling of the argument changeItem.newValue allows a remote attacker to trigger a denial of service condition. The flaw can be exploited over the network without authentication or user interaction. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. No official patch or remediation has been announced by the vendor as of the published date.

Successful exploitation results in denial of service of the affected Open5GS component, potentially disrupting network functions relying on the AMF SBI Endpoint. The attack can be initiated remotely and does not require privileges or user interaction, increasing the risk of service disruption. There is no evidence of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the Open5GS project has not responded or released a fix, users should monitor official channels for updates. In the meantime, consider restricting network access to the affected endpoint to trusted sources to reduce exposure.