CVE-2025-15685

Published: Aug 12, 2026Modified: Sep 29, 2026Deferred

5.3

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Show more

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: CNA (Secondary)

Description

A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely.

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (7)

https://github.com/open5gs/open5gs/

Source: cna@vuldb.com

https://github.com/open5gs/open5gs/issues/4156

Source: cna@vuldb.com

https://vuldb.com/cve/CVE-2025-15685

Source: cna@vuldb.com

https://vuldb.com/submit/867103

Source: cna@vuldb.com

https://vuldb.com/vuln/387278

Source: cna@vuldb.com

https://vuldb.com/vuln/387278/cti

Source: cna@vuldb.com

https://github.com/open5gs/open5gs/issues/4156

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.