CVE-2025-56394

7.5 highEPSS 0.4%

High (7.5) in free5gc free5gc. EPSS 0.4% chance of exploitation in the next 30 days.

Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow.

Severity

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-11-01)
CWE: CWE-122
Published: 2025-09-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19