go-upf vulnerabilities

2 known vulnerabilities in go-upf from Free5gc. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  go-upf: Heap-based Buffer Overflow

  CVE-2025-69247Feb 23, 2026Free5gc

  free5GC go-upf is the User Plane Function (UPF) implementation for 5G networks that is part of the free5GC project. Versions prior to 1.2.8 have a Heap-based Buffer Overflow (CWE-122) vulnerability leading to Denial of Service. Remote attackers can crash the U

• 7.5 High severity

  free5GC is an open-source project for 5th generation (5G) mobile core networks. free5GC go-upf…

  CVE-2025-69232Feb 23, 2026Free5gc

  free5GC is an open-source project for 5th generation (5G) mobile core networks. free5GC go-upf versions up to and including 1.2.6, corresponding to free5gc smf up to and including 1.4.0, have an Improper Input Validation and Protocol Compliance vulnerability l