PT-2026-34224 · Unknown · Free5Gc Udr

Published 2026-04-21 · Updated 2026-05-07 · CVE-2026-41135

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions free5GC UDR versions prior to 1.4.3

Description A memory leak in the Policy Control Function (PCF) allows an unauthenticated attacker with network access to the PCF SBI interface to cause uncontrolled memory growth. By sending repeated HTTP requests to the 'OAM' endpoint, the attacker triggers a router.Use() call inside an HTTP handler that registers a new CORS middleware for every request, permanently expanding the Gin router handler chain. This results in progressive memory exhaustion and a Denial of Service, which prevents User Equipments (UEs) from obtaining Access and Mobility (AM) and Session Management (SM) policies, thereby blocking 5G session establishment.

Recommendations Update to version 1.4.3.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2026-41135

GHSA-98CP-84M9-Q3QP

Affected Products

Free5Gc Udr

References · 8

• 🔥 https://github.com/free5gc/free5gc/security/advisories/GHSA-98cp-84m9-q3qp · Exploit
• https://github.com/free5gc/pcf/commit/599803b1b2eb4611e26d5216481ee142bce71a16 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-41135 · Security Note
• https://osv.dev/vulnerability/GHSA-98cp-84m9-q3qp · Vendor Advisory
• https://github.com/free5gc/free5gc · Note
• https://twitter.com/VulmonFeeds/status/2046812519159767411 · Twitter Post
• https://twitter.com/CVEnew/status/2048168399164023217 · Twitter Post
• https://twitter.com/dailycve/status/2052262465832968228 · Twitter Post