CVE-2024-7547Stack-based Buffer Overflow in Ofono

Severity
7.8HIGHNVD
EPSS
0.1%
top 66.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 6
Latest updateApr 16

Description

oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The specific flaw exists within the parsing of SMS PDUs. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An a

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

CVEListV5ofono/ofono2.3

🔴Vulnerability Details

3
GHSA
GHSA-qpm4-pf72-h452: oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability2024-08-06
OSV
CVE-2024-7547: oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability2024-08-06
CVEList
oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability2024-08-05

📋Vendor Advisories

2
Ubuntu
oFono vulnerabilities2026-04-16
Debian
CVE-2024-7547: ofono - oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability...2024
CVE-2024-7547 — Stack-based Buffer Overflow in Ofono | cvebase