NULL pointer dereference in Free5gc Pcf
CVE-2026-1739
A vulnerability has been found in Free5GC pcf up to 1.4.1. This affects the function HandleCreateSmPolicyRequest of the file internal/sbi/processor/smpolicy.go. The manipulation leads to null pointer dereference. The attack is possible to…
EPSS: 0.001 (16.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C.
Affected products
- Free5gc Pcf — versions 1.4.0, 1.4.1
Weakness classification (CWE)
References
- VDB-343638 | Free5GC pcf smpolicy.go HandleCreateSmPolicyRequest null pointer dereference (vdb-entry, technical-description)
- VDB-343638 | CTI Indicators (IOB, IOC, IOA) (signature, permissions-required)
- Submit #741194 | free5gc PCF v4.1.0 Denial of Service (third-party-advisory)
- github.com/free5gc/free5gc/issues/803 (issue-tracking)
- github.com/free5gc/pcf/pull/62 (issue-tracking)
- github.com/free5gc/free5gc/issues/803 (exploit, issue-tracking)
- github.com/free5gc/pcf/commit/df535f5524314620715e842baf9723efbeb481a7 (patch)
- github.com/free5gc/pcf/ (product)
Frequently asked questions
- What is CVE-2026-1739?
- CVE-2026-1739 is a medium-severity vulnerability in Free5gc Pcf, classified under NULL Pointer Dereference. CVSS score: 5.3/10. Published 2026-02-02.
- How severe is CVE-2026-1739?
- Medium severity. CVSS v3 base score is 5.3 out of 10.