NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the association setup handler process. An attacker can cause the service to crash and disrupt user-plane services by sending a PFCP Association Setup Request that omits the mandatory NodeID Information Eleme...

CVE-2025-65563

A denial-of-service vulnerability exists in the omec-project UPF (specifically the upf-epc/pfcpiface component) up to at least version upf-epc-pfcpiface:2.1.3-dev . The root cause is a NULL pointer dereference occurring in the association setup handler when the software receives a PFCP Associatio...