CVE-2024-24425: Magma

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req function at /tasks/amf/amf_as.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.

Affected products

• Magma Magma: version 1.20 only
• Oai Epc Federation Oai Epc Federation: version 1.20 only

Published 2024-11-15. Last modified 2026-06-17.