CyberSecBulletin

oFono vulnerabilities

We track 11 vulnerabilities in oFono products. 11 are rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2024.

11vulnerabilities
0critical
11high
0exploited
7.9average CVSS score

Latest oFono vulnerabilities

  • 7.8 High severity

    oFono: Out-of-bounds Write

    CVE-2024-7547oFono

    oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target mo

  • 7.8 High severity

    oFono: Out-of-bounds Write

    CVE-2024-7546oFono

    oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target mode

  • 7.8 High severity

    oFono: Out-of-bounds Write

    CVE-2024-7545oFono

    oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target mode

  • 7.8 High severity

    oFono: Out-of-bounds Write

    CVE-2024-7544oFono

    oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target mode

  • 7.8 High severity

    oFono: Out-of-bounds Write

    CVE-2024-7543oFono

    oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target mode

  • 7.8 High severity

    oFono: Out-of-bounds Write

    CVE-2024-7539oFono

    oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order

  • 7.8 High severity

    oFono: Out-of-bounds Write

    CVE-2024-7538oFono

    oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target mode

  • 8.1 High severity

    ofono: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-4235oFono

    A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base

  • 8.1 High severity

    ofono: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-4234oFonoEPSS 1.15%

    A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_submit_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base

  • 8.1 High severity

    ofono: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-4233oFonoEPSS 1.01%

    A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicio

  • 8.1 High severity

    ofono: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-4232oFono

    A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_status_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base