HighCVSS 8.4
No description is available for this CVE.
Product
debian/ofono vulnerabilities
22 published CVES affecting debian/ofono, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 22
- Critical
- 0
- High
- 18
- Medium
- 1
- Low
- 3
- Unscored
- 0
- CISA KEV
- 0
Latest debian/ofono CVEs
Newest publication first
-
-
HighCVSS 8.4
No description is available for this CVE.
-
CVE-2026-54881 ofono: ofono: heap-based buffer overflow in scan_nets_cb() via QMI network scan
PublishedHighCVSS 8.4No description is available for this CVE.
-
CVE-2026-54880 ofono: ofono: stack-based buffer overflow in huawei_nwtime_notify() via sscanf
PublishedHighCVSS 8.4No description is available for this CVE.
-
CVE-2026-54879 ofono: ofono: stack-based buffer overflow in cusd_parse() via GSM 7-bit packing
PublishedHighCVSS 8.4No description is available for this CVE.
-
HighCVSS 8.4
No description is available for this CVE.
-
CVE-2024-7547 oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability
PublishedHighCVSS 7.8 EPSS 0.25%oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to expl...
-
CVE-2024-7546 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
PublishedHighCVSS 7.8 EPSS 0.29%oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploi...
-
CVE-2024-7545 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
PublishedHighCVSS 7.8 EPSS 0.29%oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploi...
-
CVE-2024-7544 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
PublishedHighCVSS 7.8 EPSS 0.29%oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploi...
-
CVE-2024-7543 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
PublishedHighCVSS 7.8 EPSS 0.29%oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploi...
-
CVE-2024-7542 oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability
PublishedLowCVSS 3.3 EPSS 0.30%oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in orde...
-
CVE-2024-7541 oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability
PublishedLowCVSS 3.3 EPSS 0.30%oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order...
-
CVE-2024-7540 oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability
PublishedLowCVSS 3.3 EPSS 0.30%oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in orde...
-
HighCVSS 7.8 EPSS 0.29%
oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vuln...
-
CVE-2024-7538 oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability
PublishedHighCVSS 7.8 EPSS 0.29%oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploi...
-
CVE-2024-7537 oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability
PublishedMediumCVSS 5.5 EPSS 0.30%oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. Authentication is not required to exploit this vulnerability. The specific flaw exists w...
-
HighCVSS 8.1 EPSS 0.94%
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SM...
-
HighCVSS 8.1 EPSS 1.1%
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_submit_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS...
-
HighCVSS 8.1 EPSS 1.0%
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or...
-
HighCVSS 8.1 EPSS 0.96%
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_status_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS...
-
HighCVSS 8.1 EPSS 1.3%
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. Ther...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.