What’s Vulnerable › Vulnerabilities

CVE-2025-15685: Open5GS freeDiameter memory corruption

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-12 · updated 2026-09-29
• Weakness: CWE-119

Description

A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely.

Affected products

• Open5GS: 2.7.0, 2.7.1

References

• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/issues/4156
• https://vuldb.com/cve/CVE-2025-15685
• https://vuldb.com/submit/867103
• https://vuldb.com/vuln/387278
• https://vuldb.com/vuln/387278/cti
• https://github.com/open5gs/open5gs/issues/4156

Get alerted when CVE-2025-15685 or the next vulnerability affects your stack