Pcf vulnerabilities

2 known vulnerabilities in Pcf from Free5gc. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  pcf: Uncontrolled Resource Consumption

  CVE-2026-41135Apr 22, 2026Free5gc

  free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. A memory leak vulnerability in versions prior to 1.4.3 allows any unauthenticated attacker with network access to the PCF SBI

• 7.5 High severity

  pcf: NULL Pointer Dereference

  CVE-2026-1739Feb 2, 2026Free5gc

  A vulnerability has been found in Free5GC pcf up to 1.4.1. This affects the function HandleCreateSmPolicyRequest of the file internal/sbi/processor/smpolicy.go. The manipulation leads to null pointer dereference. The attack is possible to be carried out remote