Description
A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Open5GS | 2.7.0, 2.7.1 | — |
References
- VDB-387278 | Open5GS freeDiameter memory corruption vdb-entry
- VDB-387278 | CTI Indicators (IOB, IOC) signature permissions-required
- CVE-2025-15685 | CVE Analysis and Report third-party-advisory
- Submit #867103 | Open5GS v2.7.1 Memory Corruption third-party-advisory
- https://github.com/open5gs/open5gs/issues/4156 issue-tracking
- https://github.com/open5gs/open5gs/ product