BaseFortify

Publication date: 2025-11-12

Last updated on: 2025-12-31

Assigner: MITRE

Description

free5gc v4.1.0 and before is vulnerable to Buffer Overflow. When AMF receives an UplinkRANConfigurationTransfer NGAP message from a gNB, the AMF process crashes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-12

Last Modified

2025-12-31

Generated

2026-07-06

AI Q&A

2025-11-13

EPSS Evaluated

2026-07-05

NVD

CVE-2025-63679

Affected Vendors & Products

Vendor	Product	Version / Range
free5gc	free5gc	to 4.1.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

The vulnerability is a buffer overflow in free5gc version 4.1.0 and earlier. It occurs when the AMF component receives an UplinkRANConfigurationTransfer NGAP message from a gNB, causing the AMF process to crash.

Impact Analysis

This vulnerability can cause the AMF process in free5gc to crash, potentially leading to denial of service or disruption of network functions relying on the AMF.

Hi! I’m here to help you understand CVE-2025-63679. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70