CVE-2026-41136

free5GC AMF provides Access & Mobility Management Function AMF for free5GC, an an open-source project for 5th generation 5G mobile core networks. Prior to version 1.4.3, the HTTPUEContextTransfer handler in internal/sbi/apicommunication.go does not include a default case in the Content-Type switc...

PT-2026-26185

Name of the Vulnerable Software and Affected Versions free5GC versions prior to 1.4.2 free5GC version 4.0.1 Description free5GC is an open source 5G core network. A flaw exists in the AUSF component where an improper null check can lead to a denial of service. Specifically, the...

CVE-2025-70122

A heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted PFCP Session Modification Request. The issue occurs in the SDFFilterFields.UnmarshalBinary function sdf-filter.go when processing a declared length that...

PT-2026-8007

Name of the Vulnerable Software and Affected Versions free5GC version 4.0.1 Description A heap buffer overflow exists in the UPF component of free5GC version 4.0.1. This flaw allows remote attackers to potentially cause a denial of service by sending a specially crafted PFCP Session Modification...

CVE-2025-65561

An issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a denial of service or other unspecified impacts via crafted header Local SEID to the PFCP Session Modification Request...

CVE-2025-56394

Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow...

PT-2025-39188

Name of the Vulnerable Software and Affected Versions Free5gc version 4.0.1 Description The AMF component contains a buffer overflow issue due to incorrect validation of the 5GS mobile identity, leading to a slice reference overflow. Recommendations At the moment, there is no information about a...

free5GC Security Vulnerabilities

free5GC is an open source project for 5th Generation 5G mobile core networks open sourced by free5GC. free5GC suffers from a security vulnerability that stems from the presence of a buffer overflow vulnerability. An attacker could exploit this vulnerability to cause a denial of service DOS via a...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...