PT-2025-1425

Name of the Vulnerable Software and Affected Versions Magma versions 1.8.0 and earlier Description A null pointer dereference issue in the Mobile Management Entity MME allows network-adjacent attackers to crash the MME via an S1AP "Initial UE Message" packet missing an expected EUTRAN CGI field...

CVE-2023-37034: NULL Pointer Dereference

A Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP Initial UE Message packet missing an expected TAI field...

PT-2025-1422

Name of the Vulnerable Software and Affected Versions Magma versions 1.8.0 and earlier Description A null pointer dereference issue in the Mobile Management Entity MME allows network-adjacent attackers to crash the MME via an S1AP "Initial UE Message" packet missing an expected eNB UE S1AP ID...

CVE-2023-37033: NULL Pointer Dereference

A Null pointer dereference vulnerability in the Mobile Management Entity MME in Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows network-adjacent attackers to crash the MME via an S1AP Initial UE Message packet missing an expected EUTRANCGI field...