CVE-2025-70122: Buffer Overflow

Published Feb 13, 2026

Updated

A heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted PFCP Session Modification Request. The issue occurs in the SDFFilterFields.UnmarshalBinary function (sdf-filter.go) when processing a declared length that exceeds the actual buffer capacity, leading to a runtime panic and UPF crash.

Affected Software

2 affected components

free5gc Free5gc

free5gc Free5gc=4.0.1

Event History

Feb 13, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-70122?

CVE-2025-70122 has been classified as a critical severity due to its potential to cause a denial of service.

How do I fix CVE-2025-70122?

To fix CVE-2025-70122, update to the latest version of free5GC that addresses this heap buffer overflow vulnerability.

What component of free5GC is affected by CVE-2025-70122?

The affected component by CVE-2025-70122 is the UPF (User Plane Function) component.

What is the impact of CVE-2025-70122?

The impact of CVE-2025-70122 is that remote attackers can exploit the vulnerability to cause a denial of service.

In which function does CVE-2025-70122 occur?

CVE-2025-70122 occurs in the SDFFilterFields.UnmarshalBinary function located in sdf-filter.go.