PT-2026-36167 · Open5Gs · Open5Gs

CVE-2025-56568 · Published 2026-04-30 · Updated 2026-05-01

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.5

Description An assertion failure in the PCO (Protocol Configuration Options) parser within the SMF (Session Management Function) component allows remote attackers to cause a denial of service. This occurs when the system processes specially crafted NGAP messages that contain malformed length fields in the protocol configuration data.

Recommendations Update to version 2.7.5 or later.

Exploit

Fix

DoS

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2025-56568

Affected Products

Open5Gs

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/56xxx/CVE-2025-56568.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-56568 · Security Note
• https://osv.dev/vulnerability/CVE-2025-56568 · Vendor Advisory
• https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e · Note
• https://github.com/open5gs/open5gs/issues/3969 · Note
• https://t.me/cveNotify/161772 · Telegram Post
• https://twitter.com/CVEnew/status/2049956007963676695 · Twitter Post
• https://twitter.com/infoflowcloud/status/2049957511667564958 · Twitter Post