CVE-2024-24425 Information

Description

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req function at /tasks/amf/amf_as.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.

Reference

https://cellularsecurity.org/ransacked https://github.com/magma/magma https://github.com/OPENAIRINTERFACE/openair-epc-fed