Vendor

Magma

Products

CVEs

Across products

Status

Private

Products

Magma
22 CVEs
Mobile Management Entity
15 CVEs
MME
8 CVEs

Recent CVEs

View all 27 CVEs →

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-24421	Magma Magma	Cri	0.64	9.8	0.01	Jan 21, 2025	A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted NAS packet.
CVE-2026-82549	Magma Magma	Hig	0.54	8.3	0.00	Aug 30, 2026	A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly…
CVE-2024-24424	Magma Magma	Hig	0.49	7.5	0.00	Jan 21, 2025	A reachable assertion in the decode_access_point_name_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVE-2024-24420	Magma Magma	Hig	0.49	7.5	0.01	Jan 21, 2025	A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVE-2023-37032	Magma Mobile Management Entity	Hig	0.49	7.5	0.01	Jan 21, 2025	A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an…
CVE-2023-37029	Magma Magma	Hig	0.49	7.5	0.01	Jan 21, 2025	Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an assertion-based crash when an oversized NAS packet is received. An attacker may leverage this behavior to repeatedly crash the MME via either a compromised base station…
CVE-2023-37024	Magma Mobile Management Entity	Hig	0.49	7.5	0.01	Jan 21, 2025	A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an `Emergency…
CVE-2024-24426	Magma Magma	Hig	0.49	7.5	0.01	Nov 15, 2024	Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service (DoS) via a crafted NGAP packet.
CVE-2026-82547	Magma Magma	Med	0.42	6.5	0.01	Aug 30, 2026	A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched…
CVE-2023-37039	Magma Magma	Med	0.42	6.5	0.00	Jan 22, 2025	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allow network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `RRC…
CVE-2023-37038	Magma Mobile Management Entity	Med	0.42	6.5	0.00	Jan 21, 2025	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected…
CVE-2023-37037	Magma Magma	Med	0.42	6.5	0.00	Jan 21, 2025	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Supported…
CVE-2023-37036	Magma Mobile Management Entity	Med	0.42	6.5	0.00	Jan 21, 2025	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected…
CVE-2023-37035	Magma Magma	Med	0.42	6.5	0.00	Jan 21, 2025	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Global…
CVE-2023-37034	Magma Magma	Med	0.42	6.5	0.00	Jan 21, 2025	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `TAI`…
CVE-2023-37033	Magma Mobile Management Entity	Med	0.42	6.5	0.00	Jan 21, 2025	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected…
CVE-2023-37031	Magma Magma	Med	0.42	6.5	0.00	Jan 21, 2025	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `eNB Configuration Transfer` packet missing its…
CVE-2023-37030	Magma Mobile Management Entity	Med	0.42	6.5	0.00	Jan 21, 2025	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected…
CVE-2023-37028	Magma Magma	Med	0.42	6.5	0.00	Jan 21, 2025	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an…
CVE-2023-37027	Magma Magma	Med	0.42	6.5	0.00	Jan 21, 2025	Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an…

CVE-2024-24421CriJan 21, 2025
Magma
Magma
risk 0.64cvss 9.8epss 0.01
A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted NAS packet.
CVE-2026-82549HigAug 30, 2026
Magma
Magma
risk 0.54cvss 8.3epss 0.00
A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly…
CVE-2024-24424HigJan 21, 2025
Magma
Magma
risk 0.49cvss 7.5epss 0.00
A reachable assertion in the decode_access_point_name_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVE-2024-24420HigJan 21, 2025
Magma
Magma
risk 0.49cvss 7.5epss 0.01
A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVE-2023-37032HigJan 21, 2025
Magma
Mobile Management Entity
risk 0.49cvss 7.5epss 0.01
A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an…
CVE-2023-37029HigJan 21, 2025
Magma
Magma
risk 0.49cvss 7.5epss 0.01
Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an assertion-based crash when an oversized NAS packet is received. An attacker may leverage this behavior to repeatedly crash the MME via either a compromised base station…
CVE-2023-37024HigJan 21, 2025
Magma
Mobile Management Entity
risk 0.49cvss 7.5epss 0.01
A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an `Emergency…
CVE-2024-24426HigNov 15, 2024
Magma
Magma
risk 0.49cvss 7.5epss 0.01
Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service (DoS) via a crafted NGAP packet.
CVE-2026-82547MedAug 30, 2026
Magma
Magma
risk 0.42cvss 6.5epss 0.01
A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched…
CVE-2023-37039MedJan 22, 2025
Magma
Magma
risk 0.42cvss 6.5epss 0.00
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allow network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `RRC…
CVE-2023-37038MedJan 21, 2025
Magma
Mobile Management Entity
risk 0.42cvss 6.5epss 0.00
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected…
CVE-2023-37037MedJan 21, 2025
Magma
Magma
risk 0.42cvss 6.5epss 0.00
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Supported…
CVE-2023-37036MedJan 21, 2025
Magma
Mobile Management Entity
risk 0.42cvss 6.5epss 0.00
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected…
CVE-2023-37035MedJan 21, 2025
Magma
Magma
risk 0.42cvss 6.5epss 0.00
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Global…
CVE-2023-37034MedJan 21, 2025
Magma
Magma
risk 0.42cvss 6.5epss 0.00
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `TAI`…
CVE-2023-37033MedJan 21, 2025
Magma
Mobile Management Entity
risk 0.42cvss 6.5epss 0.00
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected…
CVE-2023-37031MedJan 21, 2025
Magma
Magma
risk 0.42cvss 6.5epss 0.00
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `eNB Configuration Transfer` packet missing its…
CVE-2023-37030MedJan 21, 2025
Magma
Mobile Management Entity
risk 0.42cvss 6.5epss 0.00
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected…
CVE-2023-37028MedJan 21, 2025
Magma
Magma
risk 0.42cvss 6.5epss 0.00
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an…
CVE-2023-37027MedJan 21, 2025
Magma
Magma
risk 0.42cvss 6.5epss 0.00
Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an…

View all 27 CVEs →