PT-2026-21581 · Free5Gc · Free5Gc Udm

Published 2026-02-23 · Updated 2026-03-01 · CVE-2025-69252

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions free5gc UDM versions up to and including 1.4.1

Description free5gc UDM provides Unified Data Management for free5GC, an open-source 5G mobile core network project. A NULL Pointer Dereference exists that allows remote, unauthenticated attackers to cause a Denial of Service by sending a crafted PUT request containing an unexpected ueId, leading to a service panic and crash. All deployments utilizing the UDM component may be affected. The issue can be triggered via a crafted request to the UDM service.

Recommendations free5gc UDM version 1.4.1 and earlier: Apply the patch available in free5gc/udm pull request 76.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-69252

GHSA-V8CV-QVF6-9RPM

Affected Products

Free5Gc Udm

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69252.json · Exploit
• https://github.com/free5gc/free5gc/security/advisories/GHSA-v8cv-qvf6-9rpm · Vendor Advisory
• https://github.com/free5gc/free5gc/issues/752 · Vendor Advisory
• https://github.com/free5gc/udm/commit/504b14458d156558b3c0ade7107b86b3d5e72998 · Patch
• https://osv.dev/vulnerability/CVE-2025-69252 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69252 · Security Note
• https://github.com/free5gc/udm/pull/76 · Note
• https://twitter.com/CVEarity/status/2026162187660828906 · Twitter Post
• https://twitter.com/CVEnew/status/2026184666848670040 · Twitter Post
• https://twitter.com/cracbot/status/2027700425127039087 · Twitter Post
• https://twitter.com/cracbot/status/2027338125954175389 · Twitter Post
• https://t.me/cveNotify/152945 · Telegram Post
• https://twitter.com/cracbot/status/2028062738812133388 · Twitter Post
• https://t.me/cveNotify/153186 · Telegram Post