What’s Vulnerable › Vulnerabilities

CVE-2024-37877

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-13 · updated 2026-06-17
• Weakness: CWE-125

Description

UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length. This occurs in function readOctetString in src/utils/octet_view.cpp and in function DecodeRlsMessage in src/lib/rls/rls_pdu.cpp

Affected products

• Ueranism: before 3.2.6 — fixed in 3.2.6

How to fix

Upgrade to a fixed version: Ueranism 3.2.6. Check the vendor advisory for mitigations.

References

• https://github.com/f4rs1ght/vuln-research/tree/main/CVE-2024-37877
• https://github.com/f4rs1ght/vuln-research/tree/main/CVE-2024-37877

Get alerted when CVE-2024-37877 or the next vulnerability affects your stack