https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-7547.htmlhttps://patchthecve.com/cve/CVE-2024-7547.htmlWed, 17 Jun 2026 08:20:25 +0000HIGH 7.8: oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerabilihttps://patchthecve.com/cve/CVE-2024-7546.htmlhttps://patchthecve.com/cve/CVE-2024-7546.htmlWed, 17 Jun 2026 08:20:25 +0000HIGH 7.8: oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerabilityhttps://patchthecve.com/cve/CVE-2024-7545.htmlhttps://patchthecve.com/cve/CVE-2024-7545.htmlWed, 17 Jun 2026 08:20:25 +0000HIGH 7.8: oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerabilityhttps://patchthecve.com/cve/CVE-2024-7544.htmlhttps://patchthecve.com/cve/CVE-2024-7544.htmlWed, 17 Jun 2026 08:20:25 +0000HIGH 7.8: oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerabilityhttps://patchthecve.com/cve/CVE-2024-7543.htmlhttps://patchthecve.com/cve/CVE-2024-7543.htmlWed, 17 Jun 2026 08:20:25 +0000HIGH 7.8: oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerabilityhttps://patchthecve.com/cve/CVE-2024-7542.htmlhttps://patchthecve.com/cve/CVE-2024-7542.htmlWed, 17 Jun 2026 08:20:25 +0000LOW 3.3: oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vuhttps://patchthecve.com/cve/CVE-2024-7541.htmlhttps://patchthecve.com/cve/CVE-2024-7541.htmlWed, 17 Jun 2026 08:20:24 +0000LOW 3.3: oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulhttps://patchthecve.com/cve/CVE-2024-7540.htmlhttps://patchthecve.com/cve/CVE-2024-7540.htmlWed, 17 Jun 2026 08:20:24 +0000LOW 3.3: oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vuhttps://patchthecve.com/cve/CVE-2024-7539.htmlhttps://patchthecve.com/cve/CVE-2024-7539.htmlWed, 17 Jun 2026 08:20:24 +0000HIGH 7.8: oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The spechttps://patchthecve.com/cve/CVE-2024-7538.htmlhttps://patchthecve.com/cve/CVE-2024-7538.htmlWed, 17 Jun 2026 08:20:24 +0000HIGH 7.8: oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerabilityhttps://patchthecve.com/cve/CVE-2024-7537.htmlhttps://patchthecve.com/cve/CVE-2024-7537.htmlWed, 17 Jun 2026 08:20:24 +0000MEDIUM 5.5: oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processinhttps://patchthecve.com/cve/CVE-2023-4235.htmlhttps://patchthecve.com/cve/CVE-2023-4235.htmlWed, 17 Jun 2026 06:37:22 +0000HIGH 8.1: A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound https://patchthecve.com/cve/CVE-2023-4234.htmlhttps://patchthecve.com/cve/CVE-2023-4234.htmlWed, 17 Jun 2026 06:37:22 +0000HIGH 8.1: A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_submit_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound chttps://patchthecve.com/cve/CVE-2023-4233.htmlhttps://patchthecve.com/cve/CVE-2023-4233.htmlWed, 17 Jun 2026 06:37:22 +0000HIGH 8.1: A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS.https://patchthecve.com/cve/CVE-2023-4232.htmlhttps://patchthecve.com/cve/CVE-2023-4232.htmlWed, 17 Jun 2026 06:37:22 +0000HIGH 8.1: A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_status_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound chttps://patchthecve.com/cve/CVE-2023-2794.htmlhttps://patchthecve.com/cve/CVE-2023-2794.htmlWed, 17 Jun 2026 05:53:27 +0000HIGH 8.1: A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check f