{"id":"CVE-2025-56568","details":"Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Open5GS before v2.7.5 allows remote attackers to cause denial of service via specially crafted NGAP messages containing malformed length fields in protocol configuration data.","modified":"2026-08-12T15:16:48.021509Z","published":"2026-04-30T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/56xxx/CVE-2025-56568.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/56xxx/CVE-2025-56568.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-56568"},{"type":"REPORT","url":"https://github.com/open5gs/open5gs/issues/3969"},{"type":"FIX","url":"https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/open5gs/open5gs","events":[{"introduced":"0"},{"fixed":"7dfd9a39649700c24c22f1978ed7a35541a72cca"},{"fixed":"d7707879c943d2c952235382154d835b5849d54e"}],"database_specific":{"extracted_events":[{"introduced":"Open5GS"},{"fixed":"v2.7.5"}],"source":["DESCRIPTION","REFERENCES"]}}],"versions":["v2.7.2","v2.7.1","v2.7.0","v2.6.6","v2.6.4","v2.6.3","v2.6.2","v2.6.1","v2.4.9","v2.4.8","v2.4.7","v2.4.5","v2.4.4","v2.4.3","v2.4.1","v2.4.0","v2.3.6","v2.3.2","v2.3.0","v2.2.9","v2.2.8","v2.2.7","v2.2.6","v2.2.1","v2.2.0","v2.1.7","v2.1.5","v2.1.4","v2.1.3","v2.1.1","v2.1.0","v2.0.22","v2.0.18","v2.0.0","v1.3.0","v1.2.4","v1.2.3","v1.2.2","v1.2.1","v1.2.0","v1.1.0","v1.0.0","v0.5.2","v0.5.1","v0.5.0","v0.4.4","v0.4.3","v0.4.2","v0.4.1","v0.3.10","v0.3.8","v0.3.6","v0.3.5","v0.3.4","v0.3.3","v0.3.2","v0.3.1","v0.3.0","v0.2.0","v0.1.1","v0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-56568.json","vanir_signatures_modified":"2026-08-12T15:16:48Z","vanir_signatures":[{"source":"https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e","target":{"function":"smf_gn_build_update_pdp_context_response","file":"src/smf/gn-build.c"},"deprecated":false,"digest":{"function_hash":"201376818506725996628995496669661440284","length":5010},"id":"CVE-2025-56568-029db43e","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"18762893210066557441039359392188758928","length":782},"id":"CVE-2025-56568-446bffc1","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e","target":{"file":"src/smf/gn-build.c","function":"smf_gn_build_delete_pdp_context_response"}},{"deprecated":false,"digest":{"function_hash":"200550200010657645279078314602316151936","length":5520},"id":"CVE-2025-56568-6035c153","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e","target":{"function":"gsm_build_pdu_session_establishment_accept","file":"src/smf/gsm-build.c"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e","target":{"file":"src/smf/gn-build.c","function":"smf_gn_build_create_pdp_context_response"},"deprecated":false,"digest":{"function_hash":"300029591059125079987295489686533232461","length":5854},"id":"CVE-2025-56568-7189d441"},{"deprecated":false,"digest":{"line_hashes":["101011293953955135524288880395480505865","327703808544379261526843720036418051056","289232479342995618827752438392660007672","36039561829869703546424169759054551995","96582357885000743822169611581083487851","88105317133802199396513890048722600542","128438770051580279059655926288858672381","55659345462585623172768827108579185571","163336925340110350381757996483114612664","161068772916133478164190717020501664955","153330965960650071894410345330146998677","93027418992890212286288982570622134320","101011293953955135524288880395480505865","327703808544379261526843720036418051056","289232479342995618827752438392660007672","36039561829869703546424169759054551995","163336925340110350381757996483114612664","161068772916133478164190717020501664955","153330965960650071894410345330146998677","93027418992890212286288982570622134320","203403233985969960833201513031017084775","24517954744985235688526821321692903707","18570619448525577022095911213058184210"],"threshold":0.9},"id":"CVE-2025-56568-7233a89c","signature_type":"Line","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e","target":{"file":"src/smf/s5c-build.c"}},{"deprecated":false,"digest":{"function_hash":"62582208895951730163890606790351530560","length":7159},"id":"CVE-2025-56568-7be32b26","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e","target":{"file":"src/smf/s5c-build.c","function":"smf_s5c_build_create_session_response"}},{"id":"CVE-2025-56568-7e614a72","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e","target":{"file":"src/smf/context.c","function":"smf_pco_build"},"deprecated":false,"digest":{"function_hash":"87380732655856101830754453735518059473","length":6395}},{"signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e","target":{"file":"src/smf/gsm-build.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["223530318864154323708817706102344305373","6663916547192321179623307240797211391","265662260305063153079231716266733259540","105866844354916543792506963110035332133"]},"id":"CVE-2025-56568-919b51a6","signature_type":"Line"},{"id":"CVE-2025-56568-9d85089a","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e","target":{"file":"src/smf/s5c-build.c","function":"smf_s5c_build_delete_session_response"},"deprecated":false,"digest":{"function_hash":"299548856178361070357830138773356062690","length":1417}},{"id":"CVE-2025-56568-b3684e75","signature_type":"Line","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e","target":{"file":"src/smf/gn-build.c"},"deprecated":false,"digest":{"line_hashes":["101011293953955135524288880395480505865","327703808544379261526843720036418051056","289232479342995618827752438392660007672","36039561829869703546424169759054551995","101011293953955135524288880395480505865","327703808544379261526843720036418051056","289232479342995618827752438392660007672","36039561829869703546424169759054551995","101011293953955135524288880395480505865","327703808544379261526843720036418051056","289232479342995618827752438392660007672","36039561829869703546424169759054551995"],"threshold":0.9}},{"digest":{"line_hashes":["189317724699250608444327117227152993759","182505773729030979288844678680637972693","325508491855004853249287559982859128280","261528807653386942386740027317487005122"],"threshold":0.9},"id":"CVE-2025-56568-b4ad464a","signature_type":"Line","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e","target":{"file":"lib/proto/types.c"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["200626023759948285137229278443705420698","287770126388937018259367574118268665851","321313526699510578665974358611418413560","156955013002716506581843480987255873274","170126015462430149737807411213002959","76587177393718745884737927945931721197","47748601197808826336440659901219813000","336021059925554829183731627778955108241"],"threshold":0.9},"id":"CVE-2025-56568-f3abea52","signature_type":"Line","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e","target":{"file":"src/smf/context.c"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}