CVE-2025-66720 | Free5GC 1.4.0 ampolicy.go HandleDeletePoliciesPolAssoId null pointer dereference (Issue 726)

A vulnerability was found in Free5GC 1.4.0. It has been declared as problematic. This issue affects the function HandleDeletePoliciesPolAssoId of the file internal/sbi/processor/ampolicy.go. Such manipulation leads to null pointer dereference.

This vulnerability is listed as CVE-2025-66720. The attack must be carried out from within the local network. There is no available exploit.

A patch should be applied to remediate this issue.