Vulnerability · Published Aug 12, 2026 · Assigned by VulDB
CVE-2025-15685Open5GS freeDiameter memory corruption
Medium 6.3
In plain English
A medium-severity memory corruption in Open5GS. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.3%top 79.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely.
Affected products (as reported)
Weakness: CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R
References
- VDB-387278 | Open5GS freeDiameter memory corruption vdb-entry
- VDB-387278 | CTI Indicators (IOB, IOC) signature, permissions-required
- CVE-2025-15685 | CVE Analysis and Report third-party-advisory
- Submit #867103 | Open5GS v2.7.1 Memory Corruption third-party-advisory
- https://github.com/open5gs/open5gs/issues/4156 issue-tracking
- https://github.com/open5gs/open5gs/ product