Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

16 records

Vendor: oFono Clear all filters
TI-2024-06996 CVE-2024-7547 · GHSA-qpm4-pf72-h452

Stack-based buffer overflow in oFono

Priority LOW 36

oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0025 Published 2024-08-05 No fix listed CWE-121
TI-2024-06995 CVE-2024-7546 · GHSA-5jvj-q6wc-xghj

Heap-based buffer overflow in oFono

Priority LOW 36

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00291 Published 2024-08-05 No fix listed CWE-122
TI-2024-06994 CVE-2024-7545 · GHSA-f64h-f2xm-35c7

Heap-based buffer overflow in oFono

Priority LOW 36

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00294 Published 2024-08-05 No fix listed CWE-122
TI-2024-06993 CVE-2024-7544 · GHSA-7pwv-q23j-cjjf

Heap-based buffer overflow in oFono

Priority LOW 36

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00294 Published 2024-08-05 No fix listed CWE-122
TI-2024-06992 CVE-2024-7543 · GHSA-7fjm-wq66-2552

Heap-based buffer overflow in oFono

Priority LOW 36

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00294 Published 2024-08-05 No fix listed CWE-122
TI-2024-06991 CVE-2024-7542 · GHSA-5v2c-phpf-wrv5

Use of uninitialized resource in oFono

Priority LOW 18

oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00297 Published 2024-08-05 No fix listed CWE-457
TI-2024-06990 CVE-2024-7541 · GHSA-wg9w-jqp9-m5g6

Use of uninitialized resource in oFono

Priority LOW 16

oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00297 Published 2024-08-05 No fix listed CWE-457
TI-2024-06989 CVE-2024-7540 · GHSA-xj99-h8qh-p35c

Use of uninitialized resource in oFono

Priority LOW 16

oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00297 Published 2024-08-05 No fix listed CWE-457
TI-2024-06988 CVE-2024-7539 · GHSA-vq6x-89qw-7665

Stack-based buffer overflow in oFono

Priority LOW 36

oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00294 Published 2024-08-05 No fix listed CWE-121
TI-2024-06987 CVE-2024-7538 · GHSA-jchw-pqx7-w4qj

Stack-based buffer overflow in oFono

Priority LOW 36

oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00292 Published 2024-08-05 No fix listed CWE-121
TI-2024-06986 CVE-2024-7537 · GHSA-8cxj-jgfq-rgw7

Out-of-bounds read in oFono

Priority LOW 25

oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00299 Published 2024-08-05 No fix listed CWE-125
TI-2023-03922 CVE-2023-4235 · GHSA-442g-7r67-9534

Memory corruption in ofono

Priority LOW 37

A flaw was found in ofono, an Open Source Telephony on Linux.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00943 Published 2024-04-17 Fixed in 2.1 CWE-119
TI-2023-03921 CVE-2023-4234 · GHSA-rc4x-jw53-834q

Memory corruption in ofono

Priority MEDIUM 40

A flaw was found in ofono, an Open Source Telephony on Linux.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01149 Published 2024-04-17 Fixed in 2.1 CWE-119
TI-2023-03920 CVE-2023-4233 · GHSA-8863-q6gv-88fw

Memory corruption in ofono

Priority LOW 39

A flaw was found in ofono, an Open Source Telephony on Linux.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01015 Published 2024-04-17 Fixed in 2.1 CWE-119
TI-2023-03919 CVE-2023-4232 · GHSA-7hc5-mgqg-mvrm

Memory corruption in ofono

Priority LOW 39

A flaw was found in ofono, an Open Source Telephony on Linux.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00955 Published 2024-04-17 Fixed in 2.1 CWE-119