CVE-2025-15555

HIGH

Open5GS < 2.7.6 - Stack-Based Buffer Overflow in VoLTE Cx-Test hss_ogs_diam_cx_mar_cb

Title source: llm
STIX 2.1

Description

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGS_KEY_LEN results in stack-based buffer overflow. The attack may be launched remotely. The patch is identified as 54dda041211098730221d0ae20a2f9f9173e7a21. A patch should be applied to remediate this issue.

References (10)

Core 10
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-343795 | Open5GS VoLTE Cx-Test hss-cx-path.c hss_ogs_diam_cx_mar_cb stack-based overflow
https://vuldb.com/vuln/343795
Signature, Permissions Required signature permissions-required
VDB-343795 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/343795/cti
Third Party Advisory third-party-advisory
Submit #741901 | Open5GS v2.7.6 Buffer Over-read
https://vuldb.com/submit/741901
Permissions Required, VDB Entry
https://vuldb.com/?ctiid.343795
Third Party Advisory, VDB Entry
https://vuldb.com/?id.343795
Third Party Advisory, VDB Entry
https://vuldb.com/?submit.741901
Exploit, Issue Tracking, Third Party Advisory issue-tracking
https://github.com/open5gs/open5gs/issues/4177
Exploit, Issue Tracking, Third Party Advisory issue-tracking
https://github.com/open5gs/open5gs/issues/4177#event-21256395700

Scores

CVSS v3 7.3
EPSS 0.0005
EPSS Percentile 14.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-119 CWE-121 CWE-787
Status published
Products (8)
None/Open5GS 2.7.0
None/Open5GS 2.7.1
None/Open5GS 2.7.2
None/Open5GS 2.7.3
None/Open5GS 2.7.4
None/Open5GS 2.7.5
None/Open5GS 2.7.6
open5gs/open5gs < 2.7.6
Published Feb 04, 2026
Tracked Since Feb 18, 2026