https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-65566.htmlhttps://patchthecve.com/cve/CVE-2025-65566.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. When the UPF receives a PFCP Session Report Response that is missing the mandatory Cause Information Element, the session report handler dereferences a nil pointer instead ohttps://patchthecve.com/cve/CVE-2025-65568.htmlhttps://patchthecve.com/cve/CVE-2025-65568.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a PFCP Session Establishment Request that includes a CreateFAR with an empty or truncated IPv4 address field is not properly validated. During parsinhttps://patchthecve.com/cve/CVE-2025-65567.htmlhttps://patchthecve.com/cve/CVE-2025-65567.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a specially crafted PFCP Session Establishment Request with a CreatePDR that contains a malformed Flow-Description is not robustly validated. The Flohttps://patchthecve.com/cve/CVE-2025-65565.htmlhttps://patchthecve.com/cve/CVE-2025-65565.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association is established, a PFCP Session Establishment Request that is missing the mandatory F-SEID (CPF-SEID) Information Element is not properly validated. Thhttps://patchthecve.com/cve/CVE-2025-65564.htmlhttps://patchthecve.com/cve/CVE-2025-65564.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: A denial-of-service vulnerability exists in the omec-upf (upf-epc-pfcpiface) in version upf-epc-pfcpiface:2.1.3-dev. When the UPF receives a PFCP Association Setup Request that is missing the mandatory Recovery Time Stamp Information Element, the association setup handler dereferences a nil pointer https://patchthecve.com/cve/CVE-2025-65563.htmlhttps://patchthecve.com/cve/CVE-2025-65563.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: A denial-of-service vulnerability exists in the omec-project UPF (component upf-epc/pfcpiface) up to at least version upf-epc-pfcpiface:2.1.3-dev. When the UPF receives a PFCP Association Setup Request that is missing the mandatory NodeID Information Element, the association setup handler dereferenc