CVE-2024-7545

Summary

CVE-2024-7546 is a heap-based buffer overflow vulnerability affecting oFono's SimToolKit. This issue allows local attackers to execute arbitrary code on impacted modems, provided they have the ability to execute code on the target. The vulnerability arises from insufficient validation of user-supplied data lengths in the handling of STK command PDUs, enabling attackers to write beyond the intended buffer space and ultimately execute code as the service account. This flaw was identified as ZDI-CAN-23459.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.