PT-2026-36167 · Open5Gs · Open5Gs

Published 2026-04-30 · Updated 2026-05-01 · CVE-2025-56568

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.5

Description An assertion failure in the PCO (Protocol Configuration Options) parser within the SMF (Session Management Function) component allows remote attackers to cause a denial of service. This occurs when the system processes specially crafted NGAP messages that contain malformed length fields in the protocol configuration data.

Recommendations Update to version 2.7.5 or later.

Fix

DoS

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2025-56568

Affected Products

Open5Gs

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-56568 · Security Note
• https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e · Note
• https://github.com/open5gs/open5gs/issues/3969 · Note
• https://t.me/cveNotify/161772 · Telegram Post
• https://twitter.com/infoflowcloud/status/2049957511667564958 · Twitter Post
• https://twitter.com/CVEnew/status/2049956007963676695 · Twitter Post