Magma 代码问题漏洞

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a null pointer dereference vulnerability that can be exploited by an attacker to crash MME...

CVE-2023-37039

CVE-2023-37039 describes a null pointer dereference in the Mobile Management Entity (MME) of Magma versions

Magma 安全漏洞

is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. A security vulnerability exists in Magma version 1.8.0, which can be exploited by an attacker to compromise an MME using an unauthenticated cell...

CVE-2023-37033

A Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP Initial UE Message packet missing an expected EUTRANCGI field...

PT-2025-1426 · Magma · Magma

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A null pointer dereference issue in the Mobile Management Entity MME allows network-adjacent attackers to crash the MME via an S1AP "Initial UE Message" packet missing an expected TAI field. This...

CVE-2023-37035

Affects Magma MME; vulnerability arises from a null pointer dereference in Magma

PT-2025-1429 · Magma · Magma

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A null pointer dereference issue in the Mobile Management Entity MME allows network-adjacent attackers to crash the MME via an S1AP "S1Setup Request" packet that is missing an expected Supported T...

CVE-2023-37031

A Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP eNB Configuration Transfer packet missing its required Target eNB ID field...

CVE-2023-37027

Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP E-RAB Modification Indication packet missing an expected eNBUES1APID field...

CVE-2023-37026

A Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP E-RAB Release Response packet missing an expected MMEUES1APID field...

CVE-2023-37030

A Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP Initial UE Message packet missing an expected eNBUES1APID field...

PT-2025-1431 · Magma · Magma

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A Null pointer dereference issue in the Mobile Management Entity MME allows network-adjacent attackers to crash the MME via an S1AP "Initial UE Message" packet missing an expected RRC Establishmen...

CVE-2025-0590

Improper permission settings for mobile applications com.transsion.carlcare may lead to information leakage risk...

CVE-2025-0590

Improper permission settings for mobile applications com.transsion.carlcare may lead to information leakage risk...

CVE-2025-0590

Improper permission settings for mobile applications com.transsion.carlcare may lead to information leakage risk...

CVE-2025-0590

CVE-2025-0590 affects the TECNO/Transsion Carlcare mobile app. The root cause is improper permission settings that may cause information leakage (CVE-2025-0590; CVSS 3.1: 7.5 HIGH, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Exploitation details are not provided in the documents; remediation/fixes are ...

TECNO com.transsion.carlcare 安全漏洞

TECNO com.transsion.carlcare is a mobile application from Transsion TECNO China. A security vulnerability exists in TECNO com.transsion.carlcare version 6.2.8.1, which originates from improper privilege settings and can lead to information disclosure...

CVE-2024-54681

Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application...

CVE-2024-45832 Ossur Mobile Logic Application Use of Hard-coded Credentials

Hard-coded credentials were included as part of the application binary. These credentials served as part of the application authentication flow and communication with the mobile application. An attacker could access unauthorized information...

CVE-2024-54681 Ossur Mobile Logic Application Command Injection

Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application...