CVE-2026-4531 Details
Description
A weakness has been identified in Free5GC 4.1.0. Affected is the function HandleRegistrationComplete of the file internal/gmm/handler.go of the component AMF. Executing a manipulation can lead to denial of service. The attack may be performed from remote. This patch is called 52e9386401ce56ea773c5aa587d4cdf7d53da799. It is best practice to apply a patch to resolve this issue.
A denial-of-service vulnerability has been identified in Free5GC version 4.1.0, specifically within the AMF component's 'HandleRegistrationComplete' function in the 'internal/gmm/handler.go' file. The issue arises when the AMF receives an out-of-sequence NAS message during the registration process, causing the AMF process to crash. This vulnerability can be exploited remotely, without any authentication.
Users are advised to update to Free5GC version 4.2.0, where this issue has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Mar 22, 2026CISA-ADP
Assessed Mar 23, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/free5gc/free5gc/issues/792 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/free5gc/amf/commit/52e9386401ce56ea773c5aa587d4cdf7d53da799 | [email protected] | Source CodeVendor |
| https://github.com/free5gc/amf/pull/198 | [email protected] | Issue TrackingVendor |
| https://github.com/free5gc/free5gc/ | [email protected] | ProductVendor |
| https://github.com/free5gc/free5gc/issues/792 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://vuldb.com/?ctiid.352319 | [email protected] | Content Wall |
| https://vuldb.com/?id.352319 | [email protected] | AdvisoryRemedy |
| https://vuldb.com/?submit.774073 | [email protected] | Technical Description |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-404 | Improper Resource Shutdown or Release | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Free5GC | 4.1.0 (semver) |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 23, 2026 | CVE Modified | CISA-ADP |
| Mar 22, 2026 | New CVE Received | [email protected] |