Medium · CVSS 6.5CVE-2024-24443

CVE-2024-24443

An uninitialized pointer dereference in the ngap_handle_pdu_session_resource_setup_response routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDU Session Resource Setup Response.

Published Jan 21, 2025Updated Jul 5, 2026Source checked Jul 18, 2026

Upstream Advisory

Key facts

Risk: Medium · CVSS 6.5
Exploitation: No known exploitation
Affected software: Not mapped
Fix availability: Not reported

Recommended action

Review the upstream advisory, identify the affected product in your inventory, and apply the vendor update when one is available.

What this means

CVE-2024-24443 is listed in the HOL Guard supply-chain feed, but affected software is not mapped to a package. Review the upstream advisory for the affected product and vendor guidance. An uninitialized pointer dereference in the ngap_handle_pdu_session_resource_setup_response routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDU Session Resource Setup Response.

Affected software

Affected software not mapped. Review the upstream record for vendor-specific product and version guidance.

Evidence and references

https://cellularsecurity.org/ransacked

Source metadata

Published: Jan 21, 2025
Modified: Jul 5, 2026
Source checked: Jul 18, 2026

Reported by NVD (nvd).

Back to active CVEs