← Database

CVE-2026-41136

MEDIUM CVSS: 5.3 Published: 2026-04-22 Modified: 2026-06-17

Description

free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Prior to version 1.4.3, the `HTTPUEContextTransfer` handler in `internal/sbi/api_communication.go` does not include a `default` case in the `Content-Type` switch statement. When a request arrives with an unsupported `Content-Type`, the deserialization step is silently skipped, `err` remains `nil`, and the processor is invoked with a completely uninitialized `UeContextTransferRequest` object. Version 1.4.3 contains a fix.

Affected Platforms

Free5Gc Free5GcFree5Gc Amf

Weakness Type

CWE-440

References