CVE-2025-15555
- Source
- https://cve.org/CVERecord?id=CVE-2025-15555
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15555.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-15555
- Published
- 2026-02-04T20:32:07Z
- Modified
- 2026-10-21T09:04:32Z
- Severity
-
- 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X CVSS Calculator
- Summary
- Open5GS VoLTE Cx-Test hss-cx-path.c hss_ogs_diam_cx_mar_cb stack-based overflow
- Details
-
A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGS_KEY_LEN results in stack-based buffer overflow. The attack may be launched remotely. The patch is identified as 54dda041211098730221d0ae20a2f9f9173e7a21. A patch should be applied to remediate this issue.
- Database specific
{ "cna_assigner": "VulDB", "cwe_ids": [ "CWE-119", "CWE-121" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15555.json", "unresolved_ranges": [ { "extracted_events": [ { "range": [ { "introduced": "2.7.3" }, { "last_affected": "2.7.3" }, { "introduced": "2.7.4" }, { "last_affected": "2.7.4" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" } ] } ] }- References
-
- https://github.com/open5gs/open5gs/
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15555.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-15555
- https://vuldb.com/submit/741901
- https://vuldb.com/vuln/343795
- https://github.com/open5gs/open5gs/issues/4177
- https://github.com/open5gs/open5gs/issues/4177#event-21256395700
- https://vuldb.com/vuln/343795/cti
- https://github.com/open5gs/open5gs/commit/54dda041211098730221d0ae20a2f9f9173e7a21
Affected packages
Git / github.com/open5gs/open5gs
Affected ranges
- Type
- GIT
- Repo
- https://github.com/open5gs/open5gs
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "2.7.0" }, { "last_affected": "2.7.0" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "introduced": "2.7.1" }, { "last_affected": "2.7.1" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "introduced": "2.7.2" }, { "last_affected": "2.7.2" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "introduced": "2.7.5" }, { "last_affected": "2.7.5" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "introduced": "2.7.6" }, { "last_affected": "2.7.6" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "fixed": "54dda041211098730221d0ae20a2f9f9173e7a21" } ], "source": "REFERENCES_COMMIT" } ] }
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15555.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"function_hash": "213993595022817816177817134076902112170",
"length": 14336
},
"id": "CVE-2025-15555-34129b1f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/open5gs/open5gs/commit/54dda041211098730221d0ae20a2f9f9173e7a21",
"target": {
"file": "src/hss/hss-cx-path.c",
"function": "hss_ogs_diam_cx_mar_cb"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"113277272816105327980358157955045789155",
"331843184659930697427739673789453516581",
"188990421608983822363005254150933372594",
"88594859375357997267078913998446231254"
],
"threshold": 0.9
},
"id": "CVE-2025-15555-6374d57c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/open5gs/open5gs/commit/54dda041211098730221d0ae20a2f9f9173e7a21",
"target": {
"file": "src/hss/hss-cx-path.c"
}
}
]
vanir_signatures_modified
"2026-10-21T09:04:32Z"