CVE-2025-15685
Deferred Deferred - Pending Action

Memory Corruption in Open5GS freeDiameter Component

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: VulDB

Description
A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-09-01
AI Q&A
2026-08-12
EPSS Evaluated
2026-08-31
NVD
CVE-2025-15685
EUVD
EUVD-2025-210702

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
open5gs open5gs to 2.7.1 (inc)
freediameter freediameter *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2025-15685 is a memory corruption flaw in Open5GS versions up to 2.7.1, specifically affecting the freeDiameter component. The vulnerability allows a remote attacker to send a maliciously crafted CER packet to the Diameter listener, causing a fatal crash (SIGABRT) due to an unimplemented error branch in the freeDiameter parser. This results in a denial-of-service condition as the service terminates instead of handling the invalid input gracefully.

Detection Guidance

Monitor for crashes in the Open5GS Diameter service (freeDiameter) on port 3868 (TCP/SCTP). Check logs for SIGABRT errors or unexpected terminations. Use network traffic inspection tools like tcpdump or Wireshark to capture malformed Diameter CER packets targeting port 3868.

Impact Analysis

This vulnerability can cause a denial-of-service by crashing the Open5GS Diameter service. If exploited, it may disrupt network operations relying on the Diameter protocol, such as authentication and authorization services in a 5G core network. The attack requires only a single crafted packet and can be executed remotely by any entity able to send Diameter traffic to the affected system.

Compliance Impact

This vulnerability causes a denial-of-service (DoS) condition by crashing the Open5GS Diameter service, which could disrupt critical network functions. For compliance with standards like GDPR or HIPAA, which require availability and integrity of data processing systems, such disruptions may lead to violations if they impact systems handling sensitive data.

Mitigation Strategies

Upgrade Open5GS to a version beyond 2.7.1 where the freeDiameter issue is fixed. If upgrading is not immediately possible, restrict access to port 3868 via firewall rules to trusted sources only. Monitor for exploit attempts and ensure Diameter service logging is enabled for anomaly detection.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-15685. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart