Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9
Exploited now
oFono records in CISA KEVNo oFono vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 70
A flaw was found in ofono, an Open Source Telephony on Linux.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.0125 · Published 2024-04-10 · Fixed in 2.5 CWE-119
Priority MEDIUM 40
A flaw was found in ofono, an Open Source Telephony on Linux.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.01149 · Published 2024-04-17 · Fixed in 2.1 CWE-119
Priority LOW 39
A flaw was found in ofono, an Open Source Telephony on Linux.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.01015 · Published 2024-04-17 · Fixed in 2.1 CWE-119
Priority LOW 39
A flaw was found in ofono, an Open Source Telephony on Linux.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00955 · Published 2024-04-17 · Fixed in 2.1 CWE-119
Priority LOW 37
A flaw was found in ofono, an Open Source Telephony on Linux.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00943 · Published 2024-04-17 · Fixed in 2.1 CWE-119
Priority LOW 36
oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0025 · Published 2024-08-05 · No fix listed CWE-121
Priority LOW 36
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00291 · Published 2024-08-05 · No fix listed CWE-122
Priority LOW 36
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00294 · Published 2024-08-05 · No fix listed CWE-122
Priority LOW 36
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00294 · Published 2024-08-05 · No fix listed CWE-122
Priority LOW 36
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00294 · Published 2024-08-05 · No fix listed CWE-122
Priority LOW 36
oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00294 · Published 2024-08-05 · No fix listed CWE-121
Priority LOW 36
oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00292 · Published 2024-08-05 · No fix listed CWE-121
Priority LOW 25
oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00299 · Published 2024-08-05 · No fix listed CWE-125
Priority LOW 18
oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2024-08-05 · No fix listed CWE-457
Priority LOW 16
oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2024-08-05 · No fix listed CWE-457
Priority LOW 16
oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2024-08-05 · No fix listed CWE-457
THREATIST.IORead the docs