Memory Corruption Vulnerability in Open5GS FreeDiameter Component
CVE-2025-15685

5.3MEDIUM

Key Information:

Vendor

Open5GS

Status
Open5gs
Vendor
CVE Published:
12 August 2026

What is CVE-2025-15685?

A vulnerability has been identified in the Open5GS platform, specifically within the freeDiameter component, which allows for remote memory corruption. This issue could potentially be exploited by attackers to manipulate application flow and compromise system integrity without having direct access. Users of Open5GS versions up to 2.7.1 should take immediate steps to assess their vulnerability status and apply necessary security updates to mitigate potential risks.

Affected Version(s)

Open5GS 2.7.0

Open5GS 2.7.1

References

https://vuldb.com/vuln/387278
vdb-entry
https://vuldb.com/vuln/387278/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2025-15685
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

WeiYi (VulDB User)
.