PT-2026-21564 · Free5Gc+1 · Free5Gc+1

CVE-2025-69247 · Publicado 2026-02-23 · Atualizado 2026-02-28

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions free5GC go-upf versions prior to 1.2.8

Description The go-upf component of free5GC, a User Plane Function (UPF) implementation for 5G networks, contains a Heap-based Buffer Overflow. A specially crafted PFCP Session Modification Request with an invalid SDF Filter length field can cause a heap buffer overflow, leading to a Denial of Service. This can crash the UPF network element, disrupting service for connected UEs and potentially causing cascading failures affecting the SMF. All deployments utilizing the free5GC UPF component may be affected.

Recommendations Update to version 1.2.8 or later.

Exploit

Correção

DoS

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-122

Identificadores relacionados

CVE-2025-69247

GHSA-GF69-93XR-P23G

Produtos afetados

Free5Gc

Go-Upf

Referências · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69247.json · Exploit
• https://github.com/free5gc/free5gc/issues/746 · Aviso do Fabricante
• https://github.com/free5gc/free5gc/security/advisories/GHSA-gf69-93xr-p23g · Aviso do Fabricante
• https://github.com/free5gc/go-upf/pull/85 · Correção
• https://github.com/free5gc/go-upf/commit/b798fe5ee6a984be492fa53958dd5f1305469f85 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2025-69247 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-69247 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2026115451541954798 · Publicação no Twitter
• https://twitter.com/cracbot/status/2027700413601091655 · Publicação no Twitter
• https://twitter.com/cracbot/status/2027338113698377904 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2026184681683829155 · Publicação no Twitter
• https://t.me/CVEtracker/45525 · Publicação no Telegram