Centauruszzz

**Name of the Vulnerable Software and Affected Versions** aligungr UERANSIM versions prior to 3.3.1 **Description** A remote memory corruption issue exists in the `nr-gnb` component within the `ULInformationTransfer()` function located in the `src/gnb/rrc/handler.cpp` file. This occurs when the `dedicatedNASMessage` argument is manipulated. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict access to the `ULInformationTransfer()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** aligungr UERANSIM versions prior to 3.3.0 **Description** A flaw in the `nr-gnb` component allows a remote attacker to cause an uncaught exception by manipulating the `DecodePlainMmMessage()` function within the `src/lib/nas/encode.cpp` library. **Recommendations** Apply patch 1ae9bf2062b57595dbcbc4bc1d0a0ccf06815bac to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Open5GS versions prior to 2.8.0 **Description** A remote flaw exists in the Old AMF Discovery Fallback component within the `amf nnrf try old amf discovery fallback()` function of the `src/amf/nnrf-handler.c` file. Manipulating the `discovery option` argument can lead to a use after free condition, which occurs when a program continues to use a pointer after it has been freed, potentially causing crashes or arbitrary code execution. **Recommendations** Apply patch ddd683a35f8aaac2b7b9884a24cd53bddfc65238 to resolve the issue.