PT-2025-1415 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS MME versions prior to 2.6.4 Description: The issue is related to a reachable assertion in the Uplink NAS Transport packet handler. A packet missing its MME UE S1AP ID field causes Open5GS to crash. An attacker may repeatedly send such...

PT-2024-39617

Name of the Vulnerable Software and Affected Versions SCP-Firmware versions 2.11.0 through 2.15.0 Description The issue arises from the transport message handler function not properly handling errors, which could allow an Application Processor AP to cause a buffer overflow in System Control...