Magma vulnerabilities

12 known vulnerabilities in Magma from Linux Foundation. 12 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  Magma: Insufficient Verification of Data Authenticity

  CVE-2026-82549Aug 30, 2026Linux Foundation

  A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The ex

• 7.5 High severity

  Magma: Out-of-bounds Write

  CVE-2024-24423Jan 21, 2025Linux Foundation

  The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_esm_message_container function at /nas/ies/EsmMessageContainer.cpp. This vulnerability allows attacker

• 7.5 High severity

  Magma: Out-of-bounds Write

  CVE-2024-24422Jan 21, 2025Linux Foundation

  The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a stack overflow in the decode_protocol_configuration_options function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attack

• 9.8 Critical severity

  Magma: Improper Control of Generation of Code

  CVE-2024-24421Jan 21, 2025Linux Foundation

  A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted NAS packet.

• 7.5 High severity

  Magma: Reachable Assertion

  CVE-2024-24420Jan 21, 2025Linux Foundation

  A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.

• 7.5 High severity

  Magma: Buffer Copy without Checking Size of Input

  CVE-2024-24419Jan 21, 2025Linux Foundation

  The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_traffic_flow_template_packet_filter function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows

• 7.5 High severity

  Magma: Buffer Copy without Checking Size of Input

  CVE-2024-24418Jan 21, 2025Linux Foundation

  The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_pdn_address function at /nas/ies/PdnAddress.cpp. This vulnerability allows attackers to cause a Denial

• 7.5 High severity

  Magma: Out-of-bounds Read

  CVE-2024-24417Jan 21, 2025Linux Foundation

  The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_protocol_configuration_options function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attac

• 7.5 High severity

  Magma: Buffer Copy without Checking Size of Input

  CVE-2024-24416Jan 21, 2025Linux Foundation

  The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_access_point_name_ie function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attackers to ca

• 7.5 High severity

  Magma: Out-of-bounds Write

  CVE-2023-37032Jan 21, 2025Linux Foundation

  A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet co

• 7.5 High severity

  Magma: Reachable Assertion

  CVE-2023-37029Jan 21, 2025Linux Foundation

  Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an assertion-based crash when an oversized NAS packet is received. An attacker may leverage this behavior to repeatedly crash the MME via either a compro

• 7.5 High severity

  Magma: Reachable Assertion

  CVE-2023-37024Jan 21, 2025Linux Foundation

  A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing