PT-2026-5891 · Open5Gs · Open5Gs

Jungnickel + 1 · CVE-2025-15555 · Published 2026-02-04 · Updated 2026-02-04

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions Open5GS versions through 2.7.6

Description A security flaw exists in Open5GS. The issue involves a stack-based buffer overflow in the hss ogs diam cx mar cb function within the src/hss/hss-cx-path.c file, part of the VoLTE Cx-Test component. The OGS KEY LEN argument can be manipulated, leading to the overflow. This issue can be exploited remotely.

Recommendations Apply patch 54dda041211098730221d0ae20a2f9f9173e7a21 to remediate the issue.

Exploit

Fix

Memory Corruption

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-121

CWE-119

Related Identifiers

CVE-2025-15555

Affected Products

Open5Gs

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15555.json · Exploit
• 🔥 https://github.com/open5gs/open5gs/issues/4177 · Exploit
• 🔥 https://github.com/open5gs/open5gs/issues/4177#event-21256395700 · Exploit
• https://github.com/open5gs/open5gs/commit/54dda041211098730221d0ae20a2f9f9173e7a21 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-15555 · Security Note
• https://osv.dev/vulnerability/CVE-2025-15555 · Vendor Advisory
• https://vuldb.com/?ctiid.343795 · Note
• https://t.me/CVEtracker/43767 · Telegram Post
• https://vuldb.com/?id.343795 · Note
• https://github.com/open5gs/open5gs · Note
• https://vuldb.com/submit/741901 · Note
• https://vuldb.com/vuln/343795/cti · Note
• https://vuldb.com/?submit.741901 · Note
• https://vuldb.com/vuln/343795 · Note
• https://twitter.com/CVEnew/status/2019182768178229553 · Twitter Post