Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-5501

Date: June 3, 2025

A vulnerability classified as problematic was found in Open5GS up to 2.7.3. Affected by this vulnerability is the function ngap_handle_path_switch_request_transfer of the file src/smf/ngap-handler.c of the component NGAP PathSwitchRequest Message Handler. The manipulation leads to reachable assertion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named 2daa44adab762c47a8cef69cc984946973a845b3. It is recommended to apply a patch to fix this issue.

Severity Score

Related Resources (9)

https://github.com/open5gs/open5gs/issues/3909
https://github.com/open5gs/open5gs/commit/2daa44adab762c47a8cef69cc984946973a845b3
https://vuldb.com/?submit.582265
https://github.com/open5gs/open5gs/issues/3909#issuecomment-2926682623
https://vuldb.com/?id.310915
https://github.com/user-attachments/files/20362183/AMF.crash.due.to.pathswitchrequest.zip
https://vuldb.com/?ctiid.310915
https://nvd.nist.gov/vuln/detail/CVE-2025-5501
https://www.mend.io/vulnerability-database/CVE-2025-5501

Severity Score

Weakness Type (CWE)

Reachable Assertion

CWE-617

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us