CVE-2025-69252 Details
Description
free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks. Versions up to and including 1.4.1 have a NULL Pointer Dereference vulnerability. Remote unauthenticated attackers can trigger a service panic (Denial of Service) by sending a crafted PUT request with an unexpected ueId, crashing the UDM service. All deployments of free5GC using the UDM component may be affected. free5gc/udm pull request 76 contains a fix for the issue. No direct workaround is available at the application level. Applying the official patch is recommended.
A NULL pointer dereference vulnerability has been identified in the free5gc UDM component, specifically in versions through 1.4.0. This vulnerability allows remote, unauthenticated attackers to cause a service panic, leading to a denial-of-service condition. The issue arises when the UDM service processes a PUT request with an unexpected ueId value, causing the service to crash. All deployments of free5gc using the UDM component may be affected.
Users are advised to upgrade to free5gc UDM version 1.4.1 or later, where this vulnerability has been fixed. The issue is addressed by implementing proper validation for the ueId parameter, ensuring that invalid values do not cause a service crash.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 25, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/free5gc/free5gc/issues/752 | [email protected] | ExploitIssue TrackingPatchVendor Advisory |
| https://github.com/free5gc/free5gc/security/advisories/GHSA-v8cv-qvf6-9rpm | [email protected] | PatchVendor Advisory |
| https://github.com/free5gc/udm/commit/504b14458d156558b3c0ade7107b86b3d5e72998 | [email protected] | Patch |
| https://github.com/free5gc/udm/pull/76 | [email protected] | Issue Tracking |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| free5gc udm | <= 1.4.1 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Feb 25, 2026 | Initial Analysis | [email protected] |
| Feb 24, 2026 | New CVE Received | [email protected] |