ZDI-24-1087: (0Day) oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The specific flaw exists within the parsing of SMS PDUs. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account.
Other sources
This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2024-7547.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1087?
The severity of ZDI-24-1087 is considered high due to the potential for local attackers to execute arbitrary code.
How do I fix ZDI-24-1087?
To fix ZDI-24-1087, apply the latest patches provided by the oFono development team.
Who is affected by ZDI-24-1087?
ZDI-24-1087 affects installations of oFono that process SMS PDUs.
What type of attack can exploit ZDI-24-1087?
ZDI-24-1087 can be exploited by local attackers with prior access to the target modem.
What specific flaw does ZDI-24-1087 involve?
ZDI-24-1087 involves a flaw in the parsing of SMS PDUs which can lead to arbitrary code execution.