CVE Catalog
CVE-2026-30056
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.32%
25th percentile - higher than 25% of all known CVEs
Summary
A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying crafted NGAP messages during the initialization of a new RAN connection.
Risk Assessment
The attack can crash the NGAP dispatcher, leading to disruptions in RAN communication and service unavailability.
Recommendation
Update free5gc to a patched version or apply available security fixes.
Original NVD description (English source)
A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying crafted NGAP messages during the initialization of a new RAN connection.