CVE-2026-1739 | Free5GC pcf up to 1.4.1 smpolicy.go HandleCreateSmPolicyRequest null pointer dereference (Issue 803)

A vulnerability was found in Free5GC pcf up to 1.4.1. It has been rated as problematic. This affects the function HandleCreateSmPolicyRequest of the file internal/sbi/processor/smpolicy.go. The manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-2026-1739. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Applying a patch is the recommended action to fix this issue.