Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
free5GC go-upf is the User Plane Function (UPF) implementation for 5G networks that is part of the free5GC project. Versions prior to 1.2.8 have a Heap-based Buffer Overflow (CWE-122) vulnerability leading to Denial of Service. Remote attackers can crash the UPF network element by sending a specially crafted PFCP Session Modification Request with an invalid SDF Filter length field. This causes a heap buffer overflow, resulting in complete service disruption for all connected UEs and potential cascading failures affecting the SMF. All deployments of free5GC using the UPF component may be affected. Version 1.2.8 of go-upf contains a fix.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-24 | 2 | Disclosure2 |
| 2026-02-27 | 1 | Disclosure1 |
| 2026-02-28 | 1 | General1 |
CVE-2025-69247 Heap-Based Buffer Overflow in free5GC go-UPF Enables Remote Denial of Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-69247
Post summary
A heap‑based buffer overflow in free5GC go‑UPF enables remote denial of service, as reported in CVE‑2025‑69247.
CVE-2025-69247 (CVSS:2.7, HIGH) is Analyzed. free5GC go-upf is the User Plane Function (UPF) implementation for 5G networks that is part of the free5GC project. Vers..https://nvd.nist.gov/vuln/detail/CVE-2025-69247 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post briefly announces that CVE-2025-69247 has been analyzed, provides its CVSS score and a link to the NVD entry, but offers no details on exploitation, patch, or PoC.
CVE-2025-69247 (CVSS:2.7, HIGH) is Analyzed. free5GC go-upf is the User Plane Function (UPF) implementation for 5G networks that is part of the free5GC project. Vers..https://nvd.nist.gov/vuln/detail/CVE-2025-69247 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
A concise notice that CVE‑2025‑69247 has been analyzed, providing its CVSS score and affected component, but lacking details on exploitation, fixes, or PoC.
CVE-2025-69247 free5GC go-upf is the User Plane Function (UPF) implementation for 5G networks that is part of the free5GC project. Versions prior to 1.2.8 have a Heap-based Buffer O… https://www.cve.org/CVERecord?id=CVE-2025-69247
Post summary
The text announces a heap‑based buffer overflow vulnerability in free5GC go‑upf (CVE‑2025‑69247) affecting versions before 1.2.8, without providing PoC, exploit, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | free5gc | go-upf | - | go | - |