Browse CVEs

HIGH 7.5 CVE-2025-70122 A heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted PFCP S… Free5gc No fix yet Fix from $1,9502026-02-13 HIGH 7.5 CVE-2025-70123 An improper input validation and protocol compliance vulnerability in free5GC v4.0.1 allows remote attackers to cause a denial of service. The UPF in… Free5gc No fix yet Fix from $1,9502026-02-13 HIGH 7.5 CVE-2025-70121 An array index out of bounds vulnerability in the AMF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted … Free5gc No fix yet Fix from $1,9502026-02-13 HIGH 7.5 CVE-2025-65562 The free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session Deletion Requests. An unauthenticated remote attacker… Free5gc No fix yet Fix from $1,9502025-12-18 HIGH 7.5 CVE-2025-60638 An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Nnssf_NSSAIAva… Free5gc No fix yet Fix from $1,9502025-11-24 MEDIUM 6.5 CVE-2025-60633 An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the Nudm_SubscriberDataManagement API. Free5gc No fix yet Fix from $1,6002025-11-24 MEDIUM 6.5 CVE-2025-60632 An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Npcf_BDTPolicy… Free5gc Mitigation only Fix from $1,6002025-11-24 MEDIUM 5.4 CVE-2025-29632 Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handler_genera… Free5gc No fix yet Fix from $1,6002025-05-29 HIGH 7.5 CVE-2023-49391 An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on AMF compon… Free5gc No fix yet Fix from $1,9502023-12-22 MEDIUM 5.5 CVE-2023-47025 An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component. Free5gc No fix yet Fix from $1,6002023-11-16 HIGH 7.5 CVE-2023-47345 Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat m… Free5gc No fix yet Fix from $1,9502023-11-15 HIGH 7.5 CVE-2023-47347 Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutat… Free5gc No fix yet Fix from $1,9502023-11-15 HIGH 7.5 CVE-2023-47346 Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages. Free5gc No fix yet Fix from $1,9502023-11-13 CRITICAL 9.8 CVE-2023-4659 Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator… Free5gc Mitigation only Fix from $2,3002023-10-02 HIGH 7.5 CVE-2022-38871 In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages. Free5gc No fix yet Fix from $1,9502022-11-18 HIGH 7.5 CVE-2022-38870 Free5gc v3.2.1 is vulnerable to Information disclosure. Free5gc No fix yet Fix from $1,9502022-10-25 MEDIUM 5.5 CVE-2022-43677 In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString. Free5gc No fix yet Fix from $1,6002022-10-24