Skip to main content

Vendor/product archive

free5gc / pcf CVEs

Beta · best-effort

3 CVEs tagged to free5gc / pcf0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

CVE-2026-41135

Published Apr 22, 2026

free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. A memory leak vulnerability in versions prior…

CVSS 7.5 · High
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2026-1739

Published Feb 2, 2026

A vulnerability has been found in Free5GC pcf up to 1.4.1. This affects the function HandleCreateSmPolicyRequest of the file internal/sbi/processor/smpolicy.go. The manipulation l…

CVSS 5.5 · Medium
evidence mentions
8
Buzz score
28.5
Vendor/product tagsBeta · best-effort

CVE-2025-66720

Published Jan 23, 2026

Null pointer dereference in free5gc pcf 1.4.0 in file internal/sbi/processor/ampolicy.go in function HandleDeletePoliciesPolAssoId.

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort
Showing 1-3 of 3 CVEsPage 1 of 1