CVE Vulnerabilities

CVE-2025-63679

Published: Nov 12, 2025 | Modified: Nov 12, 2025

CVSS 3.x

N/A

Source:

NVD

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

Vulnerability-free packages from our partners

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-63679
CWE	https://cwe.mitre.org/data/definitions/.html

free5gc v4.1.0 and before is vulnerable to Buffer Overflow. When AMF receives an UplinkRANConfigurationTransfer NGAP message from a gNB, the AMF process crashes.

References

https://gist.github.com/DDGod2025/5483d94b028d7a0c111ca23844e8a94d
https://github.com/free5gc/free5gc/issues/725

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.