PT-2026-21564 · Free5Gc+1 · Free5Gc+1

Published 2026-02-23 · Updated 2026-02-28 · CVE-2025-69247

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions free5GC go-upf versions prior to 1.2.8

Description The go-upf component of free5GC, a User Plane Function (UPF) implementation for 5G networks, contains a Heap-based Buffer Overflow. A specially crafted PFCP Session Modification Request with an invalid SDF Filter length field can cause a heap buffer overflow, leading to a Denial of Service. This can crash the UPF network element, disrupting service for connected UEs and potentially causing cascading failures affecting the SMF. All deployments utilizing the free5GC UPF component may be affected.

Recommendations Update to version 1.2.8 or later.

Exploit

Fix

DoS

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2025-69247

GHSA-GF69-93XR-P23G

Affected Products

Free5Gc

Go-Upf

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69247.json · Exploit
• https://github.com/free5gc/free5gc/issues/746 · Vendor Advisory
• https://github.com/free5gc/free5gc/security/advisories/GHSA-gf69-93xr-p23g · Vendor Advisory
• https://github.com/free5gc/go-upf/pull/85 · Patch
• https://github.com/free5gc/go-upf/commit/b798fe5ee6a984be492fa53958dd5f1305469f85 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-69247 · Security Note
• https://osv.dev/vulnerability/CVE-2025-69247 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2026115451541954798 · Twitter Post
• https://twitter.com/cracbot/status/2027700413601091655 · Twitter Post
• https://twitter.com/cracbot/status/2027338113698377904 · Twitter Post
• https://twitter.com/CVEnew/status/2026184681683829155 · Twitter Post
• https://t.me/CVEtracker/45525 · Telegram Post