EUVD-2024-21871

Malicious code in bioql PyPI...

EUVD-2024-21875

Malicious code in bioql PyPI...

CVE-2024-24456

CVE-2024-24456 affects Hewlett Packard Enterprise Athonet Mobile Core via the Athonet MME. An E-RAB Release Command containing a malformed NAS PDU can cause the MME to crash, potentially due to a buffer overflow. This is triggered over the network and impacts availability; no explicit remediation...

PT-2025-13824

Name of the Vulnerable Software and Affected Versions Athonet MME affected versions not specified Description The issue is caused by an E-RAB Release Command packet containing a malformed NAS PDU, which will cause the Athonet MME to immediately crash, potentially due to a buffer overflow...

CVE-2024-24456: Buffer Copy without Checking Size of Input

An E-RAB Release Command packet containing a malformed NAS PDU will cause the Athonet MME to immediately crash, potentially due to a buffer overflow...

CVE-2023-37026

A Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP "E-RAB Release Response" packet missing an expected "MMEUES1APID" field...

CVE-2023-37026: NULL Pointer Dereference

A Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP E-RAB Release Response packet missing an expected MMEUES1APID field...

PT-2025-1418 · Magma · Magma

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A Null pointer dereference issue in the Mobile Management Entity MME allows network-adjacent attackers to crash the MME via an S1AP "E-RAB Release Response" packet missing an expected MME UE S1AP ...

CVE-2023-37026

A Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP E-RAB Release Response packet missing an expected MMEUES1APID field...

CVE-2024-24452

An invalid memory access when handling the ProtocolIEID field of E-RAB Release Indication messages in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service DoS to the cellular network by repeatedly initiating connections and sending a crafted payload...

CVE-2024-24452

The HPE Athonet vEPC MME v11.4.0 is vulnerable to an out-of-bounds read (CWE-125) caused by invalid memory access when handling the ProtocolIE_ID field of E-RAB Release Indication messages. An attacker can exploit this by repeatedly initiating connections and sending a crafted payload to cause a ...

PT-2024-20401

Name of the Vulnerable Software and Affected Versions Athonet vEPC MME version 11.4.0 Description The issue is related to an invalid memory access when handling the ProtocolIE ID field of E-RAB Release Indication messages. This allows attackers to cause a Denial of Service DoS to the cellular...

CVE-2024-24452: Out-of-bounds Read

An invalid memory access when handling the ProtocolIEID field of E-RAB Release Indication messages in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service DoS to the cellular network by repeatedly initiating connections and sending a crafted payload...

CVE-2024-24452

An invalid memory access when handling the ProtocolIEID field of E-RAB Release Indication messages in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service DoS to the cellular network by repeatedly initiating connections and sending a crafted payload...