CVE-2025-29632

Author: HanyiLuo, Yuqi Huo CVE-2025-29632 关于CVE-2025-29632所涵盖漏洞的信息 受影响版本：4.0.0及更早版本 当free5gc处理InitialUEMessage时，它只检查nASPDU引用是否为nil（即是否为空指针），但未验证nASPDU的内容是否为空。这导致在后续消息解析中调用nassecurity.DecodePlainNasNoIntegrityChecknASPDU.Value时，传递了一个空的字节数组作为参数。在该函数中，由于值为空，访问NAS消息安全头失败，从而导致AMF出错并崩溃。 poc.py：一个利用脚本...

CVE-2024-24449

An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialUEMessage message sent to the AMF...

CVE-2024-24449

An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialUEMessage message sent to the AMF...

PT-2024-20398 · Unknown · Openairinterface Cn5G Amf

Name of the Vulnerable Software and Affected Versions: OpenAirInterface CN5G AMF versions up to 2.0.0 Description: The issue is caused by an uninitialized pointer dereference in the NasPdu::NasPdu component, allowing attackers to cause a Denial of Service DoS via a crafted InitialUEMessage messag...