CVE-2024-24421

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier

Description: A type confusion in the nas message decode function allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted NAS packet. This issue can lead to persistent denial of service affecting entire metropolitan areas.

Recommendations: For Magma versions 1.8.0 and earlier, update to version 1.9 or later, which includes the fix for this issue, as committed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486. As a temporary workaround, consider restricting the use of the nas message decode function to minimize the risk of exploitation.