CVE-2026-33064

Katalog CVE

CVSS 7.5 · High EPSS 0,78%

Kerentanan Missing Default Case in Multiple Condition Expression pada free5gc udm. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions prior to 1.4.2 are vulnerable to procedure panic caused by Nil Pointer Dereference in the /sdm-subscriptions endpoint. A remote attacker can cause the UDM service to panic and crash by sending a crafted POST request to the /sdm-subscriptions endpoint with a malformed URL path containing path traversal sequences (../) and a large JSON payload. The DataChangeNotificationProcedure function in notifier.go attempts to access a nil pointer without proper validation, causing a complete service crash with "runtime error: invalid memory address or nil pointer dereference". Exploitation would result in UDM functionality disruption until recovery by restart. This issue has been fixed in version 1.4.2.

Rincian

Terbit di NVD

20 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-478: Missing Default Case in Multiple Condition Expression
CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,78% peluang dieksploitasi; lebih tinggi dari 54,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/free5gc/free5gc/issues/781 exploit · issue tracking · patch · advisory vendor
• https://github.com/free5gc/free5gc/security/advisories/GHSA-7g27-v5wj-jr75 patch · advisory vendor
• https://github.com/free5gc/udm/commit/65d7070f4bfd016864cbbaefbd506bbc85d2fa92 patch
• https://github.com/free5gc/udm/pull/78 issue tracking · patch