This vulnerability in Open5GS (up to version 2.7.7) involves the pcf_sess_set_ipv6prefix function in the PCF component's context.c source file. By manipulating the SmPolicyContextData.ipv6AddressPrefix argument, an attacker can remotely trigger a denial of service condition. The CVSS 4.0 base score is 6.9, reflecting medium severity with network attack vector, no privileges required, no user interaction, and low impact on availability. The vendor has not provided a patch or remediation, and the vulnerability is publicly disclosed.

Successful exploitation results in denial of service of the affected Open5GS PCF component, potentially disrupting network policy control functions. There is no indication of data confidentiality or integrity impact. The vulnerability can be triggered remotely without authentication, increasing the risk of service disruption in affected deployments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, organizations should consider implementing network-level protections such as filtering or rate limiting traffic targeting the PCF component to mitigate potential exploitation until a patch is released.