CVE-2026-30064: n/a

The vulnerability CVE-2026-30064 affects free5gc version 4.0.1. It arises from improper input validation in the buildFilter function located in processor/processor.go. Exploiting this flaw can cause a Denial of Service (DoS) by crashing or disrupting the service when processing maliciously crafted input. The CVSS v3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (DoS). There is no known exploit in the wild and no vendor advisory or patch information is currently available.

Successful exploitation results in a Denial of Service (DoS), impacting availability of the free5gc service. There is no confidentiality or integrity impact reported. The vulnerability can be triggered remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider applying input validation controls or filtering at network boundaries to mitigate crafted inputs targeting the buildFilter function.