CVE-2024-24449: Openairinterface CN5G Amf

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted InitialUEMessage message sent to the AMF.

Affected products

• Openairinterface CN5G Amf: before 2.0.0 (fixed in 2.0.0)

Published 2024-11-15. Last modified 2026-06-17.