355 matches found
CVE-2024-34475
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmmstateauthentication in amf/gmm-sm.c for != OGSERROR...
CVE-2024-34476
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogsnasencrypt in lib/nas/common/security.c for pkbuf-len...
CVE-2024-34476
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogsnasencrypt in lib/nas/common/security.c for pkbuf-len...
CVE-2024-34475
Open5GS versions prior to 2.7.1 are vulnerable to a reachable assertion (CWE-617) within the gmm_state_authentication function in amf/gmm-sm.c. An attacker can trigger this assertion via NAS messages from a User Equipment (UE) when the condition != OGS_ERROR is met, resulting in an AMF crash . To...
CVE-2024-34475
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmmstateauthentication in amf/gmm-sm.c for != OGSERROR...
CVE-2024-34476
Open5GS versions prior to 2.7.1 are vulnerable to a denial of service condition. The root cause is a reachable assertion in the ogs_nas_encrypt function (located in lib/nas/common/security.c) due to improper handling of the pkbuf->len variable. An attacker can exploit this by sending specific ...
CVE-2024-34476
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogsnasencrypt in lib/nas/common/security.c for pkbuf-len...
CVE-2024-34475
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmmstateauthentication in amf/gmm-sm.c for != OGSERROR...
CVE-2023-33057
Transient DOS in Multi-Mode Call Processor while processing UE policy container...
Code injection
Transient DOS in Multi-Mode Call Processor while processing UE policy container...
Heap overflow
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage...
CVE-2023-33057 Improper Input Validation in Multi-Mode Call Processor
Transient DOS in Multi-Mode Call Processor while processing UE policy container...
CVE-2023-33057
CVE-2023-33057 relates to a Transient DoS in Qualcomm’s Multi-Mode Call Processor when processing UE policy containers. Connected sources describe the issue as an Improper Input Validation flaw in the Multi-Mode Call Processor, affecting Qualcomm closed‑source components. Impact per the CVSS info...
CVE-2023-33049
CVE-2023-33049 is described across multiple connected records as a transient DoS in the Qualcomm Multi‑Mode Call Processor caused by a heap leakage/ improper memory release, leading to UE failure. The vulnerability is associated with Qualcomm closed‑source components; CVSSv3.1 flags a network att...
CVE-2023-33049 Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage...
CVE-2023-33057: Improper Input Validation
Transient DOS in Multi-Mode Call Processor while processing UE policy container...
CVE-2023-33049: Missing Release of Memory after Effective Lifetime
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage...
PT-2025-1404
Name of the Vulnerable Software and Affected Versions Open5GS MME versions = 2.6.4 Description The issue is related to an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an Initial UE Message message missing a required PLMN...
CVE-2023-20702
In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue I...