CVEvulnerability
CVE-2025-15685
5.3 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-08-12
- Last modified
- 2026-09-29
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 5.3 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely.
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- https://github.com/open5gs/open5gs/ github.com
- https://github.com/open5gs/open5gs/issues/4156 github.com
- https://vuldb.com/cve/CVE-2025-15685 vuldb.com
- https://vuldb.com/submit/867103 vuldb.com
- https://vuldb.com/vuln/387278 vuldb.com
- https://vuldb.com/vuln/387278/cti vuldb.com
- https://github.com/open5gs/open5gs/issues/4156 github.com