This vulnerability arises from an assertion failure in the PCO parser of the SMF component in Open5GS prior to version 2.7.5. The flaw is triggered by NGAP messages containing malformed length fields in protocol configuration data, which can be sent remotely without authentication. Successful exploitation results in denial of service by crashing or destabilizing the affected component. The CVSS v3.1 base score is 7.5, reflecting high severity due to network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability.

The impact is a denial of service condition on the SMF component of Open5GS, potentially disrupting session management functions. There is no confidentiality or integrity impact reported. No known exploits in the wild have been documented. The vulnerability could allow remote attackers to cause service outages by sending malformed NGAP messages.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor Open5GS releases for version 2.7.5 or later that address this issue. Until a patch is available, consider implementing network-level protections to restrict or validate NGAP message sources to mitigate potential exploitation.