CVE-2022-43677: FREE5GC

Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days.

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString.

Affected products

• FREE5GC FREE5GC: version 3.2.1 only

Published 2022-10-24. Last modified 2026-06-17.