NULL pointer dereference in Free5gc Ausf
CVE-2026-33063
free5GC is an open source 5G core network. free5GC AUSF prior to version 1.4.2 has is an Improper Null Check vulnerability leading to Denial of Service. All deployments of free5GC v4.0.1 using the AUSF UE authentication service (`/nausf-au…
EPSS: 0.007 (47.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Free5gc Ausf — versions < 1.4.2
- Free5gc
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
- security-advisories@github.com (x_refsource_MISC, Issue Tracking)
- security-advisories@github.com (Patch, x_refsource_MISC, Issue Tracking)
- security-advisories@github.com (Patch, x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-33063?
- CVE-2026-33063 is a high-severity vulnerability in Free5gc Ausf, classified under NULL Pointer Dereference. CVSS score: 7.5/10. Published 2026-03-20.
- How severe is CVE-2026-33063?
- High severity. CVSS v3 base score is 7.5 out of 10.