CVE-2025-69252 - CVE House

Back to Database

Status published Medium CVE-2025-69252

free5GC has Null Pointer Dereference in UDM, Leading to Service Panic

6.6 CVSS

Vulnerability Description

free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks. Versions up to and including 1.4.1 have a NULL Pointer Dereference vulnerability. Remote unauthenticated attackers can trigger a service panic (Denial of Service) by sending a crafted PUT request with an unexpected ueId, crashing the UDM service. All deployments of free5GC using the UDM component may be affected. free5gc/udm pull request 76 contains a fix for the issue. No direct workaround is available at the application level. Applying the official patch is recommended.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-69252

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from free5gc

View All →

free5GC vulnerable to improper error handling in NEF with information exposure

free5GC has Improper Input Validation in UDM, Leading to Information Exposure

free5GC has Improper Error Handling in UDM, Leading to Information Exposure

free5GC has Array Index Out of Bounds in AMF Leading to Denial of Service

free5GC has Heap Buffer Overflow in UPF Leading to Denial of Service

Affected Vendor

free5gc

View all reports →

Affected Software

udm

Vulnerable Versions:

<= 1.4.1

Timeline

Official Publish: February 23rd, 2026

Last Modified: February 25th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service

T1499.004 Application or System Exploitation

T1489 Service Stop

T1203 Exploitation for Client Execution

T1190 Exploit Public-Facing Application