PT-2025-1410 · Open5Gs · Open5Gs Mme

Name of the Vulnerable Software and Affected Versions: Open5GS MME versions = 2.6.4 Description: The issue is related to an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a UE Capability Info Indication message missing a require...

PT-2025-1405 · Unknown · Open5Gs Mme

Name of the Vulnerable Software and Affected Versions: Open5GS MME versions prior to 2.6.4 Description: The issue concerns an assertion in Open5GS MME that can be remotely triggered via a sufficiently large ASN.1 packet sent over the S1AP interface. An attacker can repeatedly send such oversized...