CVE-2025-70121

The CVE describes an array index out of bounds in free5GC v4.0.1’s AMF GetSUCI implementation (NAS_MobileIdentity5GS.go) that can be triggered by a crafted 5GS Mobile Identity in a NAS Registration Request, causing a runtime panic and AMF denial of service. The vulnerability affects the 5G core n...

CVE-2025-56394

Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow...