SM
Product
smf
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 0Low 0
Watch
Add smf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-26025 | 7.5 | Feb 24 | free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE  Affected: <= 1.4.1 |
| CVE-2026-26024 | 7.5 | Feb 24 | free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE  Affected: <= 1.4.1 |
| CVE-2026-25501 | 7.5 | Feb 24 | free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.DLDR is set but DownlinkDataReport IE is missing Affected: <= 1.4.1 |
| CVE-2025-69232 | 7.5 | Feb 23 | free5GC hasProtocol Compliance Violation in UPF Leading to SMF Service Disruption Affected: <= 1.4.0 |
| CVE-2026-1684 | 7.5 | Jan 30 | Free5GC SMF PFCP UDP Endpoint pfcp_reports.go HandleReports denial of service Affected: 4.0; 4.1.0 |
| CVE-2026-1683 | 7.5 | Jan 30 | Free5GC SMF PFCP handler.go HandlePfcpSessionReportRequest denial of service Affected: 4.0; 4.1.0 |
| CVE-2026-1682 | 7.5 | Jan 30 | Free5GC SMF PFCP UDP Endpoint handler.go HandlePfcpAssociationReleaseRequest null pointer dereference Affected: 4.0; 4.1.0 |
| CVE-2023-47346 | 7.5 | Nov 13 | Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages Affected: 1.2.0 |
Showing 8