{"id":"CVE-2025-15685","state":"PUBLISHED","title":"Open5GS freeDiameter memory corruption","description":"A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely.","publishedAt":"2026-08-12T02:15:08.205Z","updatedAt":"2026-08-12T12:36:27.461Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","source":"VulDB"},"assigner":"VulDB","products":["n/a Open5GS"],"affected":[{"vendor":"n/a","product":"Open5GS","versions":[{"version":"2.7.0","status":"affected"},{"version":"2.7.1","status":"affected"}],"cpes":["cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*"],"modules":["freeDiameter"]}],"references":["https://vuldb.com/vuln/387278","https://vuldb.com/vuln/387278/cti","https://vuldb.com/cve/CVE-2025-15685","https://vuldb.com/submit/867103","https://github.com/open5gs/open5gs/issues/4156","https://github.com/open5gs/open5gs/"],"weaknesses":["CWE-119"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/15xxx/CVE-2025-15685.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-15685","state":"PUBLISHED","datePublished":"2026-08-12T02:15:08.205Z","dateUpdated":"2026-08-12T12:36:27.461Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-08-09T17:44:47.596Z"},"containers":{"cna":{"title":"Open5GS freeDiameter memory corruption","descriptions":[{"lang":"en","value":"A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely."}],"affected":[{"vendor":"n/a","product":"Open5GS","versions":[{"version":"2.7.0","status":"affected"},{"version":"2.7.1","status":"affected"}],"cpes":["cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*"],"modules":["freeDiameter"]}],"references":[{"url":"https://vuldb.com/vuln/387278","name":"VDB-387278 | Open5GS freeDiameter memory corruption","tags":["vdb-entry"]},{"url":"https://vuldb.com/vuln/387278/cti","name":"VDB-387278 | CTI Indicators (IOB, IOC)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2025-15685","name":"CVE-2025-15685 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/867103","name":"Submit #867103 | Open5GS v2.7.1 Memory Corruption","tags":["third-party-advisory"]},{"url":"https://github.com/open5gs/open5gs/issues/4156","tags":["issue-tracking"]},{"url":"https://github.com/open5gs/open5gs/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-119","type":"CWE","lang":"en","description":"Memory Corruption"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-08-12T02:15:08.205Z"},"timeline":[{"time":"2026-08-09T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-08-09T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-08-09T19:50:16.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"WeiYi (VulDB User)","type":"reporter"}],"x_generator":["VulDB PVTS v202608"]},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://github.com/open5gs/open5gs/issues/4156","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-12T12:36:09.746118Z","id":"CVE-2025-15685","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-12T12:36:27.461Z"}}]}}}