How severe is CVE-2023-37032?

CVE-2023-37032 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2023-37032 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (50th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2023-37032?

CVE-2023-37032 affects Linuxfoundation Magma. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2023-37032?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

Does CVE-2023-37032 have an EU (EUVD) identifier?

Yes. CVE-2023-37032 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-40952.

When was CVE-2023-37032 published?

CVE-2023-37032 was published on 2025-01-21 and last updated on 2026-06-17.

CVE-2023-37032

CVE-2023-37032 is a high-severity vulnerability in Linuxfoundation Magma with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-787.

Key facts

Severity: High (CVSS 3.x base score 7.5)
EPSS exploit prediction: 1% (50th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2023-40952
Weakness: CWE-787
Affected product: Linuxfoundation Magma
Published: 2025-01-21
Last modified: 2026-06-17

Description

A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an oversized `Emergency Number List` Information Element.

Frequently asked questions

What is CVE-2023-37032?: A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an oversized `Emergency Number List` Information Element.
How severe is CVE-2023-37032?: CVE-2023-37032 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2023-37032 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (50th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2023-37032?: CVE-2023-37032 affects Linuxfoundation Magma. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2023-37032?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
Does CVE-2023-37032 have an EU (EUVD) identifier?: Yes. CVE-2023-37032 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-40952.
When was CVE-2023-37032 published?: CVE-2023-37032 was published on 2025-01-21 and last updated on 2026-06-17.

References

https://cellularsecurity.org/ransacked

Affected products (1)

cpe:2.3:a:linuxfoundation:magma:*:*:*:*:*:*:*:*

More vulnerabilities in Linuxfoundation Magma

CVE-2024-24421 — Critical (CVSS 9.8): A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit…
CVE-2024-24423 — High (CVSS 7.5): The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to…
CVE-2024-24422 — High (CVSS 7.5): The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to…
CVE-2024-24420 — High (CVSS 7.5): A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit…
CVE-2024-24419 — High (CVSS 7.5): The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to…
CVE-2024-24418 — High (CVSS 7.5): The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to…

All CVEs affecting Linuxfoundation Magma →

Other CWE-787 (Out-of-bounds Write) vulnerabilities

CVE-2026-42369 — Critical (CVSS 10.0): GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other…
CVE-2026-4746 — Critical (CVSS 10.0): Out-of-bounds Write vulnerability in timeplus-io proton (base/poco/Foundation/src‎ modules). This vulnerability is…
CVE-2025-43300 — Critical (CVSS 10.0): An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS…
CVE-2025-24201 — Critical (CVSS 10.0): An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in…
CVE-2024-42479 — Critical (CVSS 10.0): llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause…
CVE-2024-39791 — Critical (CVSS 10.0): Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge…

Browse all CWE-787 (Out-of-bounds Write) vulnerabilities →