CVE-2024-34476

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogsnasencrypt in lib/nas/common/security.c for pkbuf-len...

CVE-2023-33057

Transient DOS in Multi-Mode Call Processor while processing UE policy container...

Heap overflow

Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage...

Code injection

Transient DOS in Multi-Mode Call Processor while processing UE policy container...

CVE-2023-33057 Improper Input Validation in Multi-Mode Call Processor

Transient DOS in Multi-Mode Call Processor while processing UE policy container...

CVE-2023-33057

CVE-2023-33057 relates to a Transient DoS in Qualcomm’s Multi-Mode Call Processor when processing UE policy containers. Connected sources describe the issue as an Improper Input Validation flaw in the Multi-Mode Call Processor, affecting Qualcomm closed‑source components. Impact per the CVSS info...

CVE-2023-33049 Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor

Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage...

CVE-2023-33049

CVE-2023-33049 is described across multiple connected records as a transient DoS in the Qualcomm Multi‑Mode Call Processor caused by a heap leakage/ improper memory release, leading to UE failure. The vulnerability is associated with Qualcomm closed‑source components; CVSSv3.1 flags a network att...

CVE-2023-20702

In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue I...

CVE-2022-40504 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...

CVE-2022-39901

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...

PT-2022-25094 · Samsung · Exynos Baseband

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR DEC-2022 Release 1 Description: The issue is related to improper authentication in the Exynos baseband, which allows a remote attacker to disable network traffic encryption between the User Equipment UE a...

Open5GS ngap-handler.c Denial of Service Vulnerability

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS v2.4.11 due to a memory leak in the ngap handler.c component. By using a specially crafted UE attachment, an attacker can exploit this...

CVE-2022-43223

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted UE attachment...

Memory corruption

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted UE attachment...

CVE-2022-43223

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted UE attachment...

Malicious Package

Overview epic-ue-marketo is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

Malicious Package

Overview epic-ue-search is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Malicious code in epic-ue-loading (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d044e670b4e25808611fceec6e531cf961c66589e41ffb8c8c4894a5b6c868b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2771 Malicious code in epic-ue-loading (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d044e670b4e25808611fceec6e531cf961c66589e41ffb8c8c4894a5b6c868b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...