CVE-2025-29632 - Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handler_generated.go, handleInitialUEMessageMain, DecodePlainNasNoIntegrityCheck, GetSecurityHeaderType components

Back Back to CVE browser

MEDIUM

Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handler_generated.go, handleInitialUEMessageMain, DecodePlainNasNoIntegrityCheck, GetSecurityHeaderType components

Published May 29, 2025

5.4

MEDIUM

CVSS 3.1

EPSS 0.35%

Description

Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handler_generated.go, handleInitialUEMessageMain, DecodePlainNasNoIntegrityCheck, GetSecurityHeaderType components

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16403
Advisory
https://github.com/OHnogood/CVE-2025-29632/
Third Party Advisory
https://github.com/free5gc/free5gc/issues/657
ExploitIssue Tracking

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16403		Advisory
https://github.com/OHnogood/CVE-2025-29632/		Third Party Advisory
https://github.com/free5gc/free5gc/issues/657		ExploitIssue Tracking

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 29, 2025

Updated May 29, 2025

Reserved Mar 11, 2025

Link CVE-2025-29632

CISA Vulnrichment

Updated May 29, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-29632

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 29, 2025

Updated May 29, 2025

Link EUVD-2025-16403

GitHub

No data