Executive brief
free5GC udm vulnerable to Invalid Curve Attack
Affected products
- Go github.com/free5gc/udm
Junglewise Threat Intelligence
CVE-2023-46324: free5GC udm vulnerable to Invalid Curve Attack
CVE-2023-46324 · Severity: low · CVSS 3.1 · Published 2023-10-23
Technologies: github.com/free5gc/udm (Go). Vendors: Go.
Related threats
- free5GC UDM information disclosure via improper SUPI validation
- GO-2026-4758 - free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request in github.com/free5gc/udm
- GO-2026-4763 - free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error in github.com/free5gc/udm
- GO-2026-4755 - free5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions reques in github.com/free5gc/udm
- GO-2026-4757 - free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference in github.com/free5gc/udm