The presence of a Path Switch Request Acknowledge Information Element within an S1AP packet will cause NextEPC to crash due to a buffer overflow write.
https://cellularsecurity.org/ransacked
Source: Mitre, NVD
Published: 2025-01-24