This vulnerability in Open5GS (up to version 2.7.7) involves the UDR component's function udr_nudr_dr_handle_subscription_context, where improper handling of the argument pei allows an attacker to remotely cause a denial of service. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. The attack vector is network-based with low attack complexity and no user interaction required. The project has been informed but has not issued a fix or official response. No patch or remediation guidance is currently available.

Successful exploitation results in denial of service of the affected Open5GS UDR component, potentially disrupting 5G core network operations relying on this service. The vulnerability can be triggered remotely without authentication, increasing the risk of service interruption. However, there is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround has been provided by the Open5GS project, users should monitor for updates from the vendor. Until a patch is available, consider limiting network exposure of the affected component and applying network-level protections to reduce attack surface.