CVE-2025-29632: FREE5GC

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handler_generated.go, handleInitialUEMessageMain, DecodePlainNasNoIntegrityCheck, GetSecurityHeaderType components

Affected products

• FREE5GC FREE5GC: version 4.0.0 only

Published 2025-05-29. Last modified 2026-06-17.