NewsBleepingComputer30.10.2026

SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone

Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices. Cape explains how these attacks exploit trust between networks and how its security-focused mobile service helps defend against them. [...]

Other advisories

Not ratedosv:CVE-2026-93962Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-based overflow
HighCVE-2026-54345GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS) in github.com/gopacket/gopacket
Not ratedosv:CVE-2025-15687Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service
Not ratedosv:CVE-2025-15685Open5GS freeDiameter memory corruption
Not ratedosv:CVE-2024-14044Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow
Not ratedosv:CVE-2024-14043Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow
Not ratedosv:CVE-2024-14042Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow
HighCVE-2026-54345GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)

Source: https://www.bleepingcomputer.com/news/security/ss7-and-diameter-attacks-how-signaling-flaws-expose-your-phone/

More on Diameter

Other advisories