CVE-2025-15555 Open5GS VoLTE Cx-Test hss-cx-path.c hss_ogs_diam_cx_mar_cb stack-based overflow

Medium 6.9 Published 4 Feb 2026 Updated 7 Apr 2026

Remote attackers can trigger a stack-based buffer overflow in Open5GS HSS via crafted Diameter messages, potentially leading to code execution or service disruption.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-15555?

CVE-2025-15555 is a medium-severity memory corruption vulnerability in Open5gs Open5gs, published on 4 Feb 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGS_KEY_LEN results in stack-based buffer overflow. The attack may be launched remotely. The patch is identified as 54dda041211098730221d0ae20a2f9f9173e7a21. A patch should be applied to remediate this issue.

Weakness: CWE-121, CWE-787, CWE-119

Which versions are affected by CVE-2025-15555?

It affects 1 product.

Products include Open5gs Open5gs.

How do I fix CVE-2025-15555?

No fix has been published for CVE-2025-15555 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2025-15555 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-15555 exists.

All Open5gs Open5gs vulnerabilities

Sources

Also known as GHSA-7679-g48g-fxpc.