CVE-2025-56568: High severity open5gs Open5GS SMF vulnerability
Published Apr 30, 2026
·Updated
Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Open5GS before v2.7.5 allows remote attackers to cause denial of service via specially crafted NGAP messages containing malformed length fields in protocol configuration data.
Affected Software
1 affected component
open5gs Open5GS SMF<2.7.5
Event History
Apr 30, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-56568?
CVE-2025-56568 is categorized as a denial of service vulnerability.
2
How do I fix CVE-2025-56568?
To mitigate CVE-2025-56568, upgrade Open5GS SMF to version 2.7.5 or later.
3
What component is affected by CVE-2025-56568?
CVE-2025-56568 affects the PCO (Protocol Configuration Options) parser in the SMF component of Open5GS.
4
Can CVE-2025-56568 be exploited remotely?
Yes, CVE-2025-56568 can be exploited remotely using specially crafted NGAP messages.
5
What could happen if my system is vulnerable to CVE-2025-56568?
If vulnerable, an attacker may cause a denial of service on systems running affected versions of Open5GS SMF.