CVE-2023-49391 free5GC AMF denial of service vulnerability

What is CVE-2023-49391?

CVE-2023-49391 is a high-severity code injection vulnerability in Free5gc Free5gc, published on 22 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on AMF component via crafted NGAP message.

Weakness: CWE-94

Which versions are affected by CVE-2023-49391?

2 open source packages ship an affected version, including github.com/free5gc/amf. It affects 1 product.

Products include Free5gc Free5gc.

How do I fix CVE-2023-49391?

No fix has been published for CVE-2023-49391 yet. Limit exposure of the affected software until one is available.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2023-49391 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-49391 exists.

Other vulnerabilities in Free5gc Free5gc

• CVE-2026-44327 free5GC: NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler Critical 10.0
• CVE-2026-44329 free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers Critical 10.0
• CVE-2026-44330 free5GC's NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions Critical 10.0
• CVE-2025-63679 Memory corruption in n/a Critical 9.8
• CVE-2026-44315 free5GC's NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions Critical 9.4

All Free5gc Free5gc vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-jcrr-rr6w-8c83.