This vulnerability involves a use-after-free condition in the discover_handler function within the /lib/sbi/nghttp2-server.c file of the NRF component in Open5GS versions 2.7.0 through 2.7.7. The flaw allows remote attackers to manipulate the function leading to use-after-free, which can cause undefined behavior or potential exploitation. The issue was reported early to the project, but no official fix or remediation has been provided as of the publication date. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity, with attack vector network, low attack complexity, no privileges required, and no user interaction needed.

The use-after-free vulnerability can be triggered remotely, potentially allowing attackers to cause memory corruption or denial of service in the affected Open5GS NRF component. Given the medium CVSS score and lack of privileges or user interaction required, exploitation could disrupt service or lead to further compromise depending on the environment. However, no confirmed exploits in the wild have been reported beyond the public exploit release.

No official patch or remediation has been released by the Open5GS project as of the latest information. Users should monitor the vendor's communications for updates and consider implementing network-level protections to restrict access to the NRF component until a fix is available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.