20 matches found
CVE-2025-29632
Author: HanyiLuo, Yuqi Huo CVE-2025-29632 the information for the vulnerability covered by CVE-2025-29632 Affected versions: 4.0.0 and previous versions When free5gc processes the InitialUEMessage, it only checks whether the nASPDU reference is nil i.e., whether it is a null pointer, but does not...
CVE-2026-82548
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...
EUVD-2026-68264
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2026-82548 Linux Foundation Magma InitialUEMessage information disclosure
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2026-82548 Linux Foundation Magma InitialUEMessage information disclosure
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2026-82548 Linux Foundation Magma InitialUEMessage information disclosure
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2026-82548
CVE-2026-82548 affects Linux Foundation Magma 1.9.0 , specifically an unknown function within the InitialUEMessage Handler component. The vulnerability enables remote information disclosure with no required privileges or user interaction, rated CVSS 3.1: 5.3 (Medium) . The exploit has been public...
PT-2026-83586
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2026-82548: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...
GO-2026-4692 Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core...
CVE-2026-32319
CVE-2026-32319 affects Ella Core (5G private-net core). The issue arises when processing a malformed integrity-protected NGAP/NAS message shorter than 7 bytes, which can cause the Ella Core process to panic and crash, enabling unauthenticated DoS and service disruption for all connected subscribe...
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload
Summary Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. Impact An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required...
Exploit for Classic Buffer Overflow in Free5Gc
CVE-2025-29632 the information for the vulnerability covered b...
CVE-2024-24449
An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialUEMessage message sent to the AMF...
CVE-2024-56921: Uncontrolled Resource Consumption
An issue was discovered in Open5gs v2.7.2. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of gmmstateexception function upon receipt of the NausfUEAuthenticationAuthenticate response...
CVE-2024-24449
An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialUEMessage message sent to the AMF...
CVE-2024-24449
The OpenAirInterface CN5G AMF software, in versions up to v2.0.0 , is vulnerable to a Denial of Service (DoS) attack. The root cause is an uninitialized pointer dereference located within the NasPdu::NasPdu component. An attacker can trigger this vulnerability by sending a crafted InitialUEMessag...
CVE-2024-24449: Access of Uninitialized Pointer
An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialUEMessage message sent to the AMF...
Design/Logic Flaw
An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...
CVE-2023-50019: Improper Handling of Exceptional Conditions
An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...