What’s Vulnerable › Vulnerabilities

CVE-2024-24426

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-15 · updated 2026-06-17
• Weakness: CWE-78

Description

Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service (DoS) via a crafted NGAP packet.

Affected products

• Oai Epc Federation: 1.2.0
• Openairinterface Magma: 1.8.0

References

• https://cellularsecurity.org/ransacked
• https://github.com/OPENAIRINTERFACE/openair-epc-fed
• https://github.com/magma/magma

Get alerted when CVE-2024-24426 or the next vulnerability affects your stack