CVE-2025-69247

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-69247

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

f

ree5GC go-upf is the User Plane Function (UPF) implementation for 5G networks that is part of the free5GC project. Versions prior to 1.2.8 have a Heap-based Buffer Overflow (CWE-122) vulnerability leading to Denial of Service. Remote attackers can crash the UPF network element by sending a specially crafted PFCP Session Modification Request with an invalid SDF Filter length field. This causes a heap buffer overflow, resulting in complete service disruption for all connected UEs and potential cascading failures affecting the SMF. All deployments of free5GC using the UPF component may be affected. Version 1.2.8 of go-upf contains a fix.

References
Link Resource
https://github.com/free5gc/free5gc/issues/746 Exploit Issue Tracking Patch Vendor Advisory
https://github.com/free5gc/free5gc/security/advisories/GHSA-gf69-93xr-p23g Patch Vendor Advisory
https://github.com/free5gc/go-upf/commit/b798fe5ee6a984be492fa53958dd5f1305469f85 Patch
https://github.com/free5gc/go-upf/pull/85 Issue Tracking Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:free5gc:go-upf:*:*:*:*:*:go:*:*
History

25 Feb 2026, 16:21

Type Values Removed Values Added
First Time Free5gc
Free5gc go-upf
Summary
  • (es) free5GC go-upf es la implementación de la Función del Plano de Usuario (UPF) para redes 5G que forma parte del proyecto free5GC. Las versiones anteriores a la 1.2.8 tienen una vulnerabilidad de desbordamiento de búfer basado en montículo (CWE-122) que conduce a una denegación de servicio. Los atacantes remotos pueden bloquear el elemento de red UPF al enviar una Solicitud de Modificación de Sesión PFCP especialmente diseñada con un campo de longitud de filtro SDF no válido. Esto causa un desbordamiento de búfer de montículo, lo que resulta en una interrupción completa del servicio para todos los UEs conectados y posibles fallos en cascada que afectan al SMF. Todas las implementaciones de free5GC que utilizan el componente UPF pueden verse afectadas. La versión 1.2.8 de go-upf contiene una solución.
CPE cpe:2.3:a:free5gc:go-upf:*:*:*:*:*:go:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
References () https://github.com/free5gc/free5gc/issues/746 - () https://github.com/free5gc/free5gc/issues/746 - Exploit, Issue Tracking, Patch, Vendor Advisory
References () https://github.com/free5gc/free5gc/security/advisories/GHSA-gf69-93xr-p23g - () https://github.com/free5gc/free5gc/security/advisories/GHSA-gf69-93xr-p23g - Patch, Vendor Advisory
References () https://github.com/free5gc/go-upf/commit/b798fe5ee6a984be492fa53958dd5f1305469f85 - () https://github.com/free5gc/go-upf/commit/b798fe5ee6a984be492fa53958dd5f1305469f85 - Patch
References () https://github.com/free5gc/go-upf/pull/85 - () https://github.com/free5gc/go-upf/pull/85 - Issue Tracking, Patch

23 Feb 2026, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-23 22:16

Updated : 2026-02-25 16:21

NVD link : CVE-2025-69247

Mitre link : CVE-2025-69247

CVE.ORG link : CVE-2025-69247

JSON object : View

Products Affected

free5gc

CWE
CWE-122

Heap-based Buffer Overflow