CVE-2025-56568

7.5 highEPSS 0.3%

High (7.5). EPSS 0.3% chance of exploitation in the next 30 days.

Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Open5GS before v2.7.5 allows remote attackers to cause denial of service via specially crafted NGAP messages containing malformed length fields in protocol configuration data.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-617
Published: 2026-04-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e
https://github.com/open5gs/open5gs/issues/3969

Check your stack JSON