CVE Catalog
CVE-2025-15685
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk0.38%
31th percentile - higher than 31% of all known CVEs
Summary
A flaw has been found in Open5GS up to 2.7.1. An unknown functionality in the freeDiameter component causes memory corruption. The attack can be carried out remotely.
Risk Assessment
Memory corruption may lead to unexpected system behavior, potentially allowing remote attacks on service integrity or availability.
Recommendation
It is recommended to upgrade Open5GS to the latest available version that includes security fixes.
Original NVD description (English source)
A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely.