CVE-2024-24446: NULL Pointer Dereference

An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialContextSetupResponse message sent to the AMF...

CVE-2024-24450

A stack-based memcpy buffer overflow exists in the ngap_handle_pdu_session_resource_setup_response routine of OpenAirInterface CN5G AMF versions

CVE-2024-24447

The oai-cn5g-amf software, in versions up to v2.0.0 , is vulnerable to a buffer overflow within the ngap_amf_handle_pdu_session_resource_setup_response function. This flaw is triggered by a PDU Session Resource Setup Response that contains an empty Response Item list, allowing an attacker to caus...

CVE-2024-24446

The OpenAirInterface CN5G AMF software, specifically versions up to v2.0.0 , is vulnerable to an uninitialized pointer dereference . An attacker can exploit this flaw by sending a crafted InitialContextSetupResponse message to the AMF, resulting in a Denial of Service (DoS) . To remediate this is...

PT-2024-20398 · Unknown · Openairinterface Cn5G Amf

Name of the Vulnerable Software and Affected Versions: OpenAirInterface CN5G AMF versions up to 2.0.0 Description: The issue is caused by an uninitialized pointer dereference in the NasPdu::NasPdu component, allowing attackers to cause a Denial of Service DoS via a crafted InitialUEMessage messag...

CVE-2024-24446

An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialContextSetupResponse message sent to the AMF...

CVE-2024-24450

Stack-based memcpy buffer overflow in the ngaphandlepdusessionresourcesetupresponse routine in OpenAirInterface CN5G AMF = 2.0.0 allows a remote attacker with access to the N2 interface to carry out denial of service against the AMF and potentially execute code by sending a PDU Session Resource...

OpenAirInterface CN5G AMF 安全漏洞

OpenAirInterface CN5G AMF is an OpenAirInterface open source application. A security vulnerability exists in OpenAirInterface CN5G AMF v2.0.0 and earlier versions, which stems from the presence of a stack-based buffer overflow that allows a remote attacker to execute code by sending a response wi...

CVE-2024-24449

An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialUEMessage message sent to the AMF...

CVE-2024-24450

Stack-based memcpy buffer overflow in the ngaphandlepdusessionresourcesetupresponse routine in OpenAirInterface CN5G AMF = 2.0.0 allows a remote attacker with access to the N2 interface to carry out denial of service against the AMF and potentially execute code by sending a PDU Session Resource...

CVE-2024-24449: Access of Uninitialized Pointer

An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialUEMessage message sent to the AMF...

PT-2024-20391 · Magma +1 · Magma +1

Name of the Vulnerable Software and Affected Versions: Magma version 1.8.0 OAI EPC Federation version 1.20 Description: The issue is related to an out-of-bounds read in the amf as establish req function at /tasks/amf/amf as.cpp. This allows attackers to cause a Denial of Service DoS via a crafted...

CVE-2024-25009 Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability

Ericsson Packet Core Controller PCC contains a vulnerability in Access and Mobility Management Function AMF where improper input validation can lead to denial of service which may result in service degradation...

CVE-2024-25009

CVE-2024-25009 involves Ericsson Packet Core Controller (PCC) where the AMF component exposes an improper input validation issue that can cause a denial of service and potential service degradation. The vulnerability is tied to PCC; impact is described as availability loss (DoS) with adjacent att...

CVE-2024-25009: Improper Input Validation

Ericsson Packet Core Controller PCC contains a vulnerability in Access and Mobility Management Function AMF where improper input validation can lead to denial of service which may result in service degradation...

SUSE CVE-2020-28598

An out-of-bounds write vulnerability exists in the Admesh stlfixnormaldirections functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted AMF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

Open5GS has an unspecified vulnerability (CNVD-2025-18584)

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS has a security vulnerability that can be exploited by an attacker to cause AMF to crash...

CVE-2024-34476

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogsnasencrypt in lib/nas/common/security.c for pkbuf-len...

CVE-2024-34475

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmmstateauthentication in amf/gmm-sm.c for != OGSERROR...

CVE-2024-34476: Buffer Access with Incorrect Length Value

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogsnasencrypt in lib/nas/common/security.c for pkbuf-len...