A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGS_KEY_LEN results in stack-based buffer overflow. The attack may be launched remotely. The patch is identified as 54dda041211098730221d0ae20a2f9f9173e7a21. A patch should be applied to remediate this issue.
References
| Link | Resource |
|---|---|
| https://github.com/open5gs/open5gs/ | Product |
| https://github.com/open5gs/open5gs/commit/54dda041211098730221d0ae20a2f9f9173e7a21 | Patch |
| https://github.com/open5gs/open5gs/issues/4177 | Exploit Issue Tracking Third Party Advisory |
| https://github.com/open5gs/open5gs/issues/4177#event-21256395700 | Exploit Issue Tracking Third Party Advisory |
| https://vuldb.com/?ctiid.343795 | Permissions Required VDB Entry |
| https://vuldb.com/?id.343795 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.741901 | Third Party Advisory VDB Entry |
| https://github.com/open5gs/open5gs/issues/4177#event-21256395700 | Exploit Issue Tracking Third Party Advisory |
Configurations
History
11 Feb 2026, 19:20
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:* | |
| First Time |
Open5gs open5gs
Open5gs |
|
| CWE | CWE-787 | |
| References | () https://github.com/open5gs/open5gs/ - Product | |
| References | () https://github.com/open5gs/open5gs/commit/54dda041211098730221d0ae20a2f9f9173e7a21 - Patch | |
| References | () https://github.com/open5gs/open5gs/issues/4177 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://github.com/open5gs/open5gs/issues/4177#event-21256395700 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.343795 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.343795 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.741901 - Third Party Advisory, VDB Entry |
05 Feb 2026, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/open5gs/open5gs/issues/4177#event-21256395700 - |
04 Feb 2026, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-04 21:15
Updated : 2026-02-11 19:20
NVD link : CVE-2025-15555
Mitre link : CVE-2025-15555
CVE.ORG link : CVE-2025-15555
JSON object : View
Products Affected
open5gs
- open5gs