Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ofono — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in ofono, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting the ofono project, specifically detailing software weaknesses such as memory corruption, input validation errors, and privilege escalation flaws. The collection compiles reported issues identified within the codebase over the past decade, covering both historical defects and recent patches disclosed by maintainers and independent researchers. By reviewing this data, users can track the vendor's advisory release patterns, analyze the prevalence of specific weakness classes like buffer overflows or logic errors, and examine the long-term vulnerability history of this Linux telephony stack. The information supports security teams in assessing risk exposure for devices relying on ofono for cellular connectivity, allowing for informed patching decisions and a clearer understanding of the software's security posture over time. This resource serves as a central reference for developers, system administrators, and security analysts seeking to monitor the integrity and reliability of the ofono component within their infrastructure.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2024-7547 oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability CWE-121 8.4 - 2024-08-05
CVE-2024-7546 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability CWE-122 8.4 - 2024-08-05
CVE-2024-7545 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability CWE-122 8.4 - 2024-08-05
CVE-2024-7544 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability CWE-122 8.4 - 2024-08-05
CVE-2024-7543 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability CWE-122 8.4 - 2024-08-05
CVE-2024-7542 oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability CWE-457 6.2 - 2024-08-05
CVE-2024-7541 oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability CWE-457 6.2 - 2024-08-05
CVE-2024-7540 oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability CWE-457 6.2 - 2024-08-05
CVE-2024-7539 oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability CWE-121 8.4 - 2024-08-05
CVE-2024-7538 oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability CWE-121 7.8 - 2024-08-05
CVE-2024-7537 oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 6.2 - 2024-08-05
CVE-2023-4235 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function CWE-119 8.1 High 2024-04-17
CVE-2023-4234 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function CWE-119 8.1 High 2024-04-17
CVE-2023-4233 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function CWE-119 8.1 High 2024-04-17
CVE-2023-4232 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function CWE-119 8.1 High 2024-04-17

All 15 known CVE vulnerabilities affecting ofono with full Chinese analysis, references, and POCs where available.