# CVE-2023-47345: free5gc Buffer Overflow vulnerability

Source: https://junglewise.ai/threats/cve-2023-47345-free5gc-buffer-overflow-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2023-11-16  
License: CC BY 4.0 with a link back

CVE-2023-47345 · Severity: low · CVSS 3.1 · Published 2023-11-16

free5gc Buffer Overflow vulnerability

Technologies: [github.com/free5gc/free5gc (Go)](https://junglewise.ai/threats/technologies/github-com-free5gc-free5gc). Vendors: [Go](https://junglewise.ai/threats/vendors/go).

## Quick answers

**Is CVE-2023-47345 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2023-47345 being exploited in the wild.

**How severe is CVE-2023-47345?** Low severity, with a CVSS score of 3.1, published 16 November 2023.

**Which products and versions are affected?** github.com/free5gc/free5gc (Go) SEMVER:introduced=0,last_affected=3.3.0.

**Is there a fix for CVE-2023-47345?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2023-47345?** Check whether you run github.com/free5gc/free5gc (Go) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- github.com/free5gc/free5gc (Go) SEMVER:introduced=0,last_affected=3.3.0

## Identifiers

- CVE-2023-47345
- GHSA-6944-6pmv-6mp2

## Related threats

- [free5GC NRF input validation bypass in NF profile registration](https://junglewise.ai/threats/cve-2026-55068-free5gc-nrf-input-validation-bypass-in-nf-profile-registration)
- [free5gc AUSF improper input validation in supiOrSuci field](https://junglewise.ai/threats/cve-2026-53551-free5gc-ausf-improper-input-validation-in-supiorsuci-field)
- [Free5gc allows a local attacker to cause a denial of service via the free5gc-compose component](https://junglewise.ai/threats/cve-2023-47025-free5gc-allows-a-local-attacker-to-cause-a-denial-of-service-via)
- [Free5gc vulnerable to uncontrolled resource consumption](https://junglewise.ai/threats/cve-2022-38871-free5gc-vulnerable-to-uncontrolled-resource-consumption)
- [GO-2022-1083 - Panic on malformed messages in github.com/free5gc/aper](https://junglewise.ai/threats/cve-2022-43677-free5gc-vulnerable-to-malformed-ngap-message-crashing-the-amf-and)