CVE-2025-69248

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-69248
free5GC is an open-source project for 5th generation (5G) mobile core networks. Versions up to and including 1.4.1 of free5GC's AMF service have a Buffer Overflow vulnerability leading to Denial of Service. Remote unauthenticated attackers can crash the AMF service by sending a specially crafted NAS Registration Request with a malformed 5GS Mobile Identity, causing complete denial of service for the 5G core network. All deployments of free5GC using the AMF component may be affected. Pull request 43 of the free5gc/nas repo contains a fix. No direct workaround is available at the application level. Applying the official patch is recommended.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/free5gc/free5gc/issues/747 Exploit Issue Tracking Patch Vendor Advisory
https://github.com/free5gc/free5gc/security/advisories/GHSA-h6xc-8vvf-jcjp Patch Vendor Advisory
https://github.com/free5gc/nas/commit/0329a7ac3f314f210366c1b3c33dc29eded4ac5f Patch
https://github.com/free5gc/nas/pull/43 Issue Tracking Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:free5gc:amf:*:*:*:*:*:go:*:*
History

25 Feb 2026, 16:35

Type Values Removed Values Added
First Time Free5gc amf
Free5gc
Summary
  • (es) free5GC es un proyecto de código abierto para redes centrales móviles de quinta generación (5G). Las versiones hasta la 1.4.1 inclusive del servicio AMF de free5GC tienen una vulnerabilidad de desbordamiento de búfer que conduce a una denegación de servicio. Los atacantes remotos no autenticados pueden bloquear el servicio AMF enviando una solicitud de registro NAS especialmente diseñada con una identidad móvil 5GS malformada, causando una denegación de servicio completa para la red central 5G. Todas las implementaciones de free5GC que utilizan el componente AMF pueden verse afectadas. La solicitud de extracción 43 del repositorio free5gc/nas contiene una corrección. No hay una solución alternativa directa disponible a nivel de aplicación. Se recomienda aplicar el parche oficial.
References () https://github.com/free5gc/free5gc/issues/747 - () https://github.com/free5gc/free5gc/issues/747 - Exploit, Issue Tracking, Patch, Vendor Advisory
References () https://github.com/free5gc/free5gc/security/advisories/GHSA-h6xc-8vvf-jcjp - () https://github.com/free5gc/free5gc/security/advisories/GHSA-h6xc-8vvf-jcjp - Patch, Vendor Advisory
References () https://github.com/free5gc/nas/commit/0329a7ac3f314f210366c1b3c33dc29eded4ac5f - () https://github.com/free5gc/nas/commit/0329a7ac3f314f210366c1b3c33dc29eded4ac5f - Patch
References () https://github.com/free5gc/nas/pull/43 - () https://github.com/free5gc/nas/pull/43 - Issue Tracking, Patch
CPE cpe:2.3:a:free5gc:amf:*:*:*:*:*:go:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

24 Feb 2026, 00:16

Type Values Removed Values Added
Summary (en) free5GC is an an open-source project for 5th generation (5G) mobile core networks. Versions up to and including 1.4.1 of free5GC's AMF service have a Buffer Overflow vulnerability leading to Denial of Service. Remote unauthenticated attackers can crash the AMF service by sending a specially crafted NAS Registration Request with a malformed 5GS Mobile Identity, causing complete denial of service for the 5G core network. All deployments of free5GC using the AMF component may be affected. Pull request 43 of the free5gc/nas repo contains a fix. No direct workaround is available at the application level. Applying the official patch is recommended. (en) free5GC is an open-source project for 5th generation (5G) mobile core networks. Versions up to and including 1.4.1 of free5GC's AMF service have a Buffer Overflow vulnerability leading to Denial of Service. Remote unauthenticated attackers can crash the AMF service by sending a specially crafted NAS Registration Request with a malformed 5GS Mobile Identity, causing complete denial of service for the 5G core network. All deployments of free5GC using the AMF component may be affected. Pull request 43 of the free5gc/nas repo contains a fix. No direct workaround is available at the application level. Applying the official patch is recommended.

23 Feb 2026, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-23 22:16

Updated : 2026-02-25 16:35

NVD link : CVE-2025-69248

Mitre link : CVE-2025-69248

CVE.ORG link : CVE-2025-69248

JSON object : View

Products Affected

free5gc

  • amf
CWE
CWE-129

Improper Validation of Array Index