CVE-2025-15555: Stack-based Buffer Overflow in Open5GS
A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGS_KEY_LEN results in stack-based buffer overflow. The attack may be launched remotely. The patch is identified as 54dda041211098730221d0ae20a2f9f9173e7a21. A patch should be applied to remediate this issue.
AI Analysis
Technical Summary
Open5GS versions 2.7.0 through 2.7.6 contain a stack-based buffer overflow vulnerability in the hss_ogs_diam_cx_mar_cb function of the src/hss/hss-cx-path.c file, part of the VoLTE Cx-Test component. The vulnerability is triggered by manipulation of the OGS_KEY_LEN argument, allowing remote attackers to cause a buffer overflow on the stack. This can potentially lead to memory corruption and impact the stability or security of the affected system. The vulnerability has a CVSS 4.0 score of 6.9 (medium severity). A patch identified by commit 54dda041211098730221d0ae20a2f9f9173e7a21 has been released to fix the issue.
Potential Impact
The vulnerability allows remote attackers to cause a stack-based buffer overflow by manipulating the OGS_KEY_LEN argument in the affected function. This can lead to memory corruption, which may result in denial of service or potentially arbitrary code execution depending on exploitation conditions. However, no known exploits in the wild have been reported to date. The medium CVSS score reflects the moderate risk posed by this vulnerability.
Mitigation Recommendations
A patch identified by commit 54dda041211098730221d0ae20a2f9f9173e7a21 is available and should be applied to all affected Open5GS versions (2.7.0 through 2.7.6) to remediate this vulnerability. Applying this official fix is the recommended mitigation. No alternative mitigations or vendor advisories indicating no action required are provided.
CVE-2025-15555: Stack-based Buffer Overflow in Open5GS
Description
A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGS_KEY_LEN results in stack-based buffer overflow. The attack may be launched remotely. The patch is identified as 54dda041211098730221d0ae20a2f9f9173e7a21. A patch should be applied to remediate this issue.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Open5GS versions 2.7.0 through 2.7.6 contain a stack-based buffer overflow vulnerability in the hss_ogs_diam_cx_mar_cb function of the src/hss/hss-cx-path.c file, part of the VoLTE Cx-Test component. The vulnerability is triggered by manipulation of the OGS_KEY_LEN argument, allowing remote attackers to cause a buffer overflow on the stack. This can potentially lead to memory corruption and impact the stability or security of the affected system. The vulnerability has a CVSS 4.0 score of 6.9 (medium severity). A patch identified by commit 54dda041211098730221d0ae20a2f9f9173e7a21 has been released to fix the issue.
Potential Impact
The vulnerability allows remote attackers to cause a stack-based buffer overflow by manipulating the OGS_KEY_LEN argument in the affected function. This can lead to memory corruption, which may result in denial of service or potentially arbitrary code execution depending on exploitation conditions. However, no known exploits in the wild have been reported to date. The medium CVSS score reflects the moderate risk posed by this vulnerability.
Mitigation Recommendations
A patch identified by commit 54dda041211098730221d0ae20a2f9f9173e7a21 is available and should be applied to all affected Open5GS versions (2.7.0 through 2.7.6) to remediate this vulnerability. Applying this official fix is the recommended mitigation. No alternative mitigations or vendor advisories indicating no action required are provided.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-02-02T19:02:29.323Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6983afd5f9fa50a62fabdb1f
Added to database: 2/4/2026, 8:45:09 PM
Last enriched: 4/7/2026, 10:50:38 PM
Last updated: 5/8/2026, 5:38:14 AM
Views: 67
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.