Skip to content

Vendor

magma vulnerabilities

2 published CVES affecting magma, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of magma alerts

Products

Latest magma CVEs

Newest publication first

  1. CVE-2024-24426 CVE-2024-24426 in github.com/magma/magma

    Published
    HighCVSS 7.5 EPSS 0.50%

    Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service (DoS) via a crafted NGAP packet.

  2. CVE-2024-24425 CVE-2024-24425 in github.com/magma/magma

    Published
    MediumCVSS 6.5 EPSS 0.49%

    Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req function at /tasks/amf/amf_as.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.