CVE-2025-65563: Pfcp Nodeid Nil Deref

Missing validation for the presence of the NodeID Information Element. A missing NodeID in PFCP messages may lead to a nil pointer dereference when calling `.NodeID()`, causing the process to panic and resulting in a denial-of-service (DoS) condition. Check that `$X.NodeID != nil` before attempting to read its value.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Go
greprules fetch cve-2025-65563-pfcp-nodeid-nil-deref --engine opengrep

Description

Missing validation for the presence of the NodeID Information Element. A missing NodeID in PFCP messages may lead to a nil pointer dereference when calling `.NodeID()`, causing the process to panic and resulting in a denial-of-service (DoS) condition. Check that `$X.NodeID != nil` before attempting to read its value.