CVE-2025-56394

Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow.

CVSS v3.1 CNA

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.42% chance of exploitation in the next 30 days, 35th percentile

Published

2025-09-23

Updated

2025-09-24

Proof-of-concept exploits (1)

• https://gist.github.com/DDGod2025/532691e3e2db9b47c67c3d153c026e62

Security advisories

• free5gc/free5gc/issues/690

References

• CVE Record
• NVD entry