PT-2026-8006 · Free5Gc · Free5Gc

Published 2026-02-13 · Updated 2026-02-18 · CVE-2025-70121

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions free5GC version 4.0.1

Description A flaw exists in the AMF component of free5GC that could allow a remote attacker to disrupt service. This happens due to an array index out of bounds condition when processing a specially crafted 5GS Mobile Identity within a NAS Registration Request message. Specifically, the issue is located in the GetSUCI method (NAS MobileIdentity5GS.go) where an attempt is made to access index 5 of a 5-element array, resulting in a runtime panic and AMF crash.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting or filtering the format of 5GS Mobile Identity data received in NAS Registration Request messages.

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-70121

Affected Products

Free5Gc

References · 7

• https://github.com/free5gc/free5gc/issues/747 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-70121 · Security Note
• https://osv.dev/vulnerability/CVE-2025-70121 · Vendor Advisory
• https://t.me/cveNotify/152353 · Telegram Post
• https://twitter.com/cracbot/status/2024076479349592315 · Twitter Post
• https://twitter.com/CVEnew/status/2022362798135689358 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2022376577359548817 · Twitter Post