66 matches found
CVE-2026-1973 Free5GC SMF establishPfcpSession null pointer dereference
A vulnerability was determined in Free5GC up to 4.1.0. The impacted element is the function establishPfcpSession of the component SMF. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. I...
CVE-2026-1682 Free5GC SMF PFCP UDP Endpoint handler.go HandlePfcpAssociationReleaseRequest null pointer dereference
A flaw has been found in Free5GC SMF up to 4.1.0. Affected is the function HandlePfcpAssociationReleaseRequest of the file internal/pfcp/handler/handler.go of the component PFCP UDP Endpoint. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The...
CVE-2025-65561
An issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a denial of service or other unspecified impacts via crafted header Local SEID to the PFCP Session Modification Request...
free5GC 安全漏洞
free5GC is a 5th Generation 5G mobile core network open source project by free5GC Open Source. A security vulnerability exists in free5GC that stems from a lack of bounds checking when processing PFCP session deletion requests, which could lead to integer underflow and denial of service...
NSSF panic due to nil pointer dereference when expiry field is omitted in NSSAIAvailability POST
An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NnssfNSSAIAvailability API...
CVE-2025-60633
An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the NudmSubscriberDataManagement API...
CVE-2025-60632
An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NpcfBDTPolicyControl API...
free5GC 安全漏洞
free5GC is an open source project for 5th Generation 5G mobile core networks open sourced by free5GC. A security vulnerability exists in free5GC versions 4.0.0 and 4.0.1, which stems from the NnssfNSSAIAvailability API mishandling of ad-hoc POST requests, which could lead to a denial of service...
PT-2025-47942
Name of the Vulnerable Software and Affected Versions Free5GC versions 4.0.0 through 4.0.1 Description An issue exists that allows an attacker to cause a denial of service by sending a crafted POST request to the Nnssf NSSAIAvailability API endpoint. The request is specifically crafted to disrupt...
free5GC 安全漏洞
free5GC is a 5th Generation 5G mobile core network open source project by free5GC open source. A security vulnerability exists in free5GC versions 4.0.0 and 4.0.1, which stems from a flaw in the NudmSubscriberDataManagement API that could lead to a denial of service...
CVE-2025-60638
The CVE-2025-60638 issue affects Free5GC v4.0.0 and v4.0.1, where a crafted POST to the Nnssf_NSSAIAvailability API can cause a denial of service. Connected reports identify a Go/nssf panic caused by a nil pointer dereference when the expiry field is omitted in NSSAIAvailability POST requests, in...
free5GC 安全漏洞
free5GC is a 5th Generation 5G mobile core network open source project by free5GC open source. A security vulnerability exists in free5GC v4.1.0 and earlier versions, which stems from a buffer overflow in AMF's processing of the UplinkRANConfigurationTransfer message, which could lead to a crash...
EUVD-2023-3014
Malicious code in bioql PyPI...
CVE-2025-56394
Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow...
CVE-2025-29632
Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handlergenerated.go, handleInitialUEMessageMain, DecodePlainNasNoIntegrityCheck, GetSecurityHeaderType components...
free5GC 安全漏洞
free5GC is a 5th Generation 5G mobile core network open source project by free5GC open source. A security vulnerability exists in free5GC version 4.0.0, which stems from a buffer overflow in the AMF component that could lead to a denial of service...
CVE-2025-29632
Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handlergenerated.go, handleInitialUEMessageMain, DecodePlainNasNoIntegrityCheck, GetSecurityHeaderType components...
CVE-2023-46324
pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated. An attacker can send arbitrary SUCIs to the UDM, which tries to decrypt them via both its...
free5GC Security Vulnerabilities
free5GC is a 5th Generation 5G mobile core network open source project by free5GC Open Source. A security vulnerability exists in free5GC version 3.3.0, which stems from a vulnerability that could allow a remote attacker to execute arbitrary code and cause a denial of service DoS on AMF component...
