What is GHSA-jvw3-jcj6-6qc7?

GHSA-jvw3-jcj6-6qc7 is a security advisory published by GitHub Security Advisories with High severity. Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of...

Which CVE IDs does GHSA-jvw3-jcj6-6qc7 cover?

GHSA-jvw3-jcj6-6qc7 covers the following CVE IDs: CVE-2026-25657. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jvw3-jcj6-6qc7?

GHSA-jvw3-jcj6-6qc7 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-jvw3-jcj6-6qc7HighCVSS 6.5

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of...

Vendor

GitHub Security Advisories

Published

June 5, 2026

Last Modified

June 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-25657 →

📋 Description

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Syntactically Invalid Structure (CWE-228) vulnerability where an attacker continuously sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-25657
https://www.ericsson.com/en/about-us/security/psirt/cve-2026-25657
https://github.com/advisories/GHSA-jvw3-jcj6-6qc7