free5GC PCF: Memory Leak via CORS Middleware Registration in HTTP Handler Leads to Denial of Service

Summary A memory leak vulnerability in the free5GC PCF Policy Control Function allows any unauthenticated attacker with network access to the PCF SBI interface to cause uncontrolled memory growth by sending repeated HTTP requests to the OAM endpoint. The root cause is a router.Use call inside an...

EUVD-2026-24575

free5GC PCF: Memory Leak via CORS Middleware Registration in HTTP Handler Leads to Denial of Service...

CVE-2026-41135

free5GC UDR is the Policy Control Function PCF for free5GC, an an open-source project for 5th generation 5G mobile core networks. A memory leak vulnerability in versions prior to 1.4.3 allows any unauthenticated attacker with network access to the PCF SBI interface to cause uncontrolled memory...

CVE-2026-41135

CVE-2026-41135 affects free5GC UDR (PCF) prior to version 1.4.3. The root cause is a faulty router.Use() call inside an HTTP handler that registers a new CORS middleware on every incoming request, causing the Gin router to permanently grow its handler chain. This leads to progressive memory exhau...

PT-2026-34224

Name of the Vulnerable Software and Affected Versions free5GC UDR versions prior to 1.4.3 Description A memory leak in the Policy Control Function PCF allows an unauthenticated attacker with network access to the PCF SBI interface to cause uncontrolled memory growth. By sending repeated HTTP...

Denial Of Service (DoS)

github.com/free5gc/pcf is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of crafted POST requests to the NpcfBDTPolicyControl API, which allows an attacker to trigger service disruption...

The vulnerability of the find_sdca_entity_control() function in the sound/soc/sdca/sdca_functions.c module of the Linux operating system’s SoC audio support allows a intruder to trigger a service failure.

The vulnerability of the findsdcaentitycontrol function in the sound/soc/sdca/sdcafunctions.c module of the Linux operating system’s SoC audio support is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause...

CVE-2025-66720

Null pointer dereference in free5gc pcf 1.4.0 in file internal/sbi/processor/ampolicy.go in function HandleDeletePoliciesPolAssoId...

PT-2026-4470

Name of the Vulnerable Software and Affected Versions free5gc pcf version 1.4.0 Description A null pointer dereference exists in free5gc pcf version 1.4.0. This issue is located in the file internal/sbi/processor/ampolicy.go within the HandleDeletePoliciesPolAssoId function. Recommendations At th...

Vulnerability of the nvme_tcp_setup_ctrl() function in the driver/nvme/host/tcp.c module – A Linux kernel NVME driver that allows a hacker to cause a service failure

Vulnerability of the nvmetcpsetupctrl function in the driver/nvme/host/tcp.c module – The Linux kernel’s NVME support driver has a vulnerability where memory is not released after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2018-0940

Malware in sbrugna...

CVE-2023-46553

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl...

CVE-2023-34566

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo...

PT-2025-27744

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A buffer size issue in the Linux kernel's wifi component, specifically in the rtw88 module, has been resolved. The issue involved reading out of bounds due to an incorrect buffer size...

CVE-2025-29101

Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the getparentControllistInfo function...

CVE-2025-29101

The CVE-2025-29101 entry concerns Tenda AC8V4.0 with firmware version V16.03.34.06, where a stack overflow is triggered by the deviceid parameter in the get_parentControl_list_Info function. The vulnerability is documented as a stack overflow that can impact availability, and CNVD references pote...

DEBIAN-CVE-2024-53203

In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential array underflow in ucsiccgsynccontrol The "command" variable can be controlled by the user via debugfs. The worry is that if conindex is zero then "&uc-ucsi-connectorconindex - 1" would be an array...

PT-2024-21268 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In the tmu tz control function of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which arises from a core memory corruption while processing control functions...

SUSE CVE-2020-0466

In doepollctl and eploopcheckproc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...