This vulnerability affects Open5GS, an open-source 5G core network implementation, specifically in the BSF component's function bsf_sess_find_by_ipv6prefix located in /src/bsf/context.c. Improper handling of the ipv6Prefix argument allows remote attackers to cause a denial of service by triggering a fault in this function. The issue impacts all versions from 2.7.0 through 2.7.7. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The project has been informed but has not yet issued a patch or official remediation.

Successful exploitation results in denial of service of the BSF component in Open5GS, potentially disrupting 5G core network operations. The attack can be initiated remotely without authentication or user interaction. There is no indication of data confidentiality or integrity impact. No known exploits are reported in the wild beyond the published proof-of-concept.

No official patch or remediation is currently available from the Open5GS project. Users should monitor the vendor's advisory channels for updates. Until a fix is released, consider limiting exposure of the BSF service to untrusted networks to reduce the risk of remote exploitation.