CVE-2025-5501: Open5GS NGAP PathSwitchRequest Message ngap-handler.c ngap_handle_path_switch_request_transfer assertion
A vulnerability classified as problematic was found in Open5GS up to 2.7.3. Affected by this vulnerability is the function ngaphandlepathswitchrequesttransfer of the file src/smf/ngap-handler.c of the component NGAP PathSwitchRequest Message Handler. The manipulation leads to reachable assertion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named 2daa44adab762c47a8cef69cc984946973a845b3. It is recommended to apply a patch to fix this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5501?
CVE-2025-5501 is classified as a problematic vulnerability in Open5GS up to version 2.7.3.
How do I fix CVE-2025-5501?
To fix CVE-2025-5501, update Open5GS to a version above 2.7.3.
What component is affected by CVE-2025-5501?
CVE-2025-5501 affects the NGAP PathSwitchRequest Message Handler in Open5GS.
What functions are involved in CVE-2025-5501?
The vulnerability involves the function ngap_handle_path_switch_request_transfer in Open5GS.
What versions of Open5GS are impacted by CVE-2025-5501?
CVE-2025-5501 impacts Open5GS versions up to and including 2.7.3.