CVE-2025-15555

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGS_KEY_LEN results in stack-based buffer overflow. The attack may be launched remotely. The patch is identified as 54dda041211098730221d0ae20a2f9f9173e7a21. A patch should be applied to remediate this issue.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Weakness enumeration

CWE-119 CWE-121 CWE-787

Affected software

Vendor	Product	Versions
n/a	Open5GS	2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; 2.7.6

References

https://github.com/open5gs/open5gs/Product
https://github.com/open5gs/open5gs/commit/54dda041211098730221d0ae20a2f9f9173e7a21Patch
https://github.com/open5gs/open5gs/issues/4177Exploit, Issue Tracking, Third Party Advisory
https://github.com/open5gs/open5gs/issues/4177#event-21256395700Exploit, Issue Tracking, Third Party Advisory
https://vuldb.com/submit/741901
https://vuldb.com/vuln/343795
https://vuldb.com/vuln/343795/cti
https://github.com/open5gs/open5gs/issues/4177#event-21256395700Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: Feb 4, 2026
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-155567.5Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded up CVE-2025-155578.8An Improper Certificate Validation vulnerability in TP-Link Tapo H100 v1 and Tapo P100 v1 allows an on-path attacker on the same network seg CVE-2025-155588.0Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-CVE-2025-155599.8An unauthenticated attacker can inject OS commands when calling a server API endpoint in NesterSoft WorkTime. The server API call to generat CVE-2025-15569.8A vulnerability, which was classified as problematic, has been found in westboy CicadasCMS 1.0. This issue affects some unknown processing o CVE-2025-155608.8An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpoint to inject SQL qu CVE-2025-155617.8An attacker can exploit the update behavior of the WorkTime monitoring daemon to elevate privileges on the local system to NT Authority\SYST CVE-2025-155626.1The server API endpoint /report/internet/urls reflects received data into the HTML response without applying proper encoding or filtering. T CVE-2025-155635.3Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the WorkTime server. No CVE-2025-155645.5A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file CVE-2025-155655.3The Nexi XPay plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization checks on the redirect fu CVE-2025-155668.8A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be us