Magma buffer overflow vulnerability (CNVD-2025-15064)

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service DoS via a carefully crafted NA...

Magma Buffer Overflow Vulnerability

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a buffer overflow vulnerability that can be exploited by an attacker to trigger a denial of service DoS via a carefully crafted...

Magma Type Obfuscation Vulnerability

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma suffers from a type obfuscation vulnerability that can be exploited by attackers to execute arbitrary code or cause a denial of...

Unspecified Vulnerability in Magma (CNVD-2025-15070)

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a security vulnerability that can be exploited by attackers to cause a denial of service DoS via a carefully crafted NAS packet...

CVE-2024-24430

A reachable assertion in the mmeuefindbyimsi function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

PT-2025-1254

Name of the Vulnerable Software and Affected Versions NextEPC MME version 1.0.1 and earlier Description The issue concerns a stack-based buffer overflow vulnerability in the Emergency Number List decoding method. An attacker can exploit this by sending a NAS message with an oversized Emergency...

CVE-2023-37023: Reachable Assertion

Open5GS MME versions = 2.6.4 contain a reachable assertion in the Uplink NAS Transport packet handler. A packet missing its MMEUES1APID field causes Open5gs to crash; an attacker may repeatedly send such packets to cause denial of service...

CVE-2024-24432

A reachable assertion in the ogskdfhashmme function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24430

A reachable assertion in the mmeuefindbyimsi function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2023-37023

Open5GS MME versions = 2.6.4 contain a reachable assertion in the "Uplink NAS Transport" packet handler. A packet missing its "MMEUES1APID" field causes Open5gs to crash; an attacker may repeatedly send such packets to cause denial of service...

CVE-2024-24430: Reachable Assertion

A reachable assertion in the mmeuefindbyimsi function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24430

A reachable assertion in the mmeuefindbyimsi function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24432

A reachable assertion in the ogskdfhashmme function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24430

A reachable assertion in the mmeuefindbyimsi function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

Open5GS security vulnerabilities

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS version 2.6.4 and prior versions, which stems from the inclusion of reachable assertions in the Uplink NAS Transport...

PT-2025-2378 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS versions = 2.6.4 Description: A reachable assertion in the nas eps send emm to esm function allows attackers to cause a Denial of Service DoS via a crafted NGAP packet. Recommendations: For Open5GS versions = 2.6.4, consider updating ...

CVE-2024-24432

A reachable assertion in the ogskdfhashmme function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24430

The Open5GS open-source implementation of 5G Core and EPC is vulnerable to a Denial of Service (DoS) attack in versions

CVE-2024-24432

A reachable assertion in the ogs_kdf_hash_mme function of Open5GS versions

CVE-2023-37023

Open5GS MME versions = 2.6.4 contain a reachable assertion in the Uplink NAS Transport packet handler. A packet missing its MMEUES1APID field causes Open5gs to crash; an attacker may repeatedly send such packets to cause denial of service...