Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/free5gc/amf

5 known vulnerabilities (1 high, 3 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 1 high, 3 medium, 1 low
Registry
pkg.go.dev

Advisories 5

  • CVE-2026-42081Medium 6.1

    free5GC: UE Security Capability bypass on NGAP PathSwitchRequest

    Affected: through 1.4.3; all versions.

  • free5GC: Missing Concurrent NAS SMC Validation During NGAP Handover

    Affected: all versions; through 1.4.3.

  • CVE-2026-41136Medium 5.5

    free5GC AMF missing default case in Content-Type switch in HTTPUEContextTransfer

    Affected: all versions; through 1.4.3.

  • CVE-2026-4531Medium 6.9

    Free5GC AMF handler.go HandleRegistrationComplete denial of service

    Affected: fixed in 1.4.3-0.20260306074636-52e9386401ce.

  • An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on…

    Affected: through 1.2.0.