Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-5501: Open5GS may crash handling path‑switch request

CVE-2025-5501 · published 1 year ago

Summary

The Open5GS software (versions up to 2.7.3) can be forced to stop working when it processes a specific network message. An attacker could trigger this from a distance, causing service interruption. Apply the latest Open5GS update that includes the provided fix to prevent the crash.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
open5gs	open5gs	<= 2.7.3 `cpe:2.3:a:open5gs:open5gs::::::::`

Original advisory text

Open5GS NGAP PathSwitchRequest Message ngap-handler.c ngap_handle_path_switch_request_transfer assertion

A vulnerability classified as problematic was found in Open5GS up to 2.7.3. Affected by this vulnerability is the function ngap_handle_path_switch_request_transfer of the file src/smf/ngap-handler.c of the component NGAP PathSwitchRequest Message Handler. The manipulation leads to reachable assertion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named 2daa44adab762c47a8cef69cc984946973a845b3. It is recommended to apply a patch to fix this issue.

References

https://github.com/open5gs/open5gs/commit/2daa44adab762c47a8cef69cc984946973a845... Patch
https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5501.j... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-5501 Vendor Advisory
https://vuldb.com/?id.310915 Vendor Advisory
https://vuldb.com/?submit.582265 Vendor Advisory
https://github.com/open5gs/open5gs/issues/3909 Third Party Advisory
https://github.com/open5gs/open5gs/issues/3909#issuecomment-2926682623 Third Party Advisory
https://vuldb.com/?ctiid.310915 Third Party Advisory
https://github.com/user-attachments/files/20362183/AMF.crash.due.to.pathswitchre... Exploit

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker partial control

Severity

7.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-617Reachable Assertion

Timeline

Published3 Jun 2025

Updated4 Nov 2026

First seen12 Apr 2026

Sources

CVE-2025-5501 · OSV

CVE-2025-5501 · NVD

Track software like this

Free during beta