Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-7513 State: PUBLISHED Published: 2024-08-14T19:48:46.656Z Last Updated: 2025-08-15T13:03:12.526Z Vendors: Rockwell Automation Products: FactoryTalk View Site Edition Problem Types: CWE-732 Description: CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or replace files, which are executed by account with elevated permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201688.html
CVE ID: CVE-2024-7514 State: PUBLISHED Published: 2024-10-11T08:30:45.127Z Last Updated: 2024-10-11T14:58:58.852Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: webtoffee Products: WordPress Comments Import & Export Problem Types: CWE-22 Description: The WordPress Comments Import & Export plugin for WordPress is vulnerable to to arbitrary file read due to insufficient file path validation during the comments import process, in versions up to, and including, 2.3.7. This makes it possible for authenticated attackers, with Author-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. The issue wa
and above, to read the contents of arbitrary files on the server, which can contain sensitive information. The issue was partially fixed in version 2.3.8 and fully fixed in 2.3.9 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/30a79974-ee61-4764-8864-89659b1848a4?source=cve - https://plugins.trac.wordpress.org/browser/comments-import-export-woocommerce/tags/2.3.7/includes/importer/class-hf_cmt_impexpcsv-import.php#L346
CVE ID: CVE-2024-7515 State: PUBLISHED Published: 2024-08-14T19:40:20.990Z Last Updated: 2024-08-14T19:59:57.056Z Vendors: Rockwell Automation Products: CompactLogix 5380 (5069-L3z), ControlLogix® 5580 (1756- L8z), GuardLogix 5580 (1756- L8zS), Compact GuardLogix 5380 (5069 – L3zS2), CompactLogix 5480 (5069-L4) Problem Types: CWE-20 Description: CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201686.html
CVE ID: CVE-2024-7516 State: PUBLISHED Published: 2024-11-12T18:41:54.940Z Last Updated: 2024-11-21T16:17:44.152Z Vendors: Brocade Products: Fabric OS Problem Types: CWE-322 Description: A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise from the attacker's ability to forge an SSH key while the Brocade Fabric OS Switch is performing various remote operations initiated by a switch admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25177
CVE ID: CVE-2024-7517 State: PUBLISHED Published: 2024-11-21T05:53:34.442Z Last Updated: 2025-09-09T19:02:20.886Z Vendors: Brocade Products: Fabric OS Problem Types: CWE-78 Description: A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of the portcfg command. This specific exploitation is only possible on IP Extension platforms: Brocade 7810, Brocade 7840, Brocade 7850 and on Brocade X6 or X7 directors with an SX-6 Extension blade installed. The attacker must be logged into the switch via SSH or serial console to conduct the atta
X-6 Extension blade installed. The attacker must be logged into the switch via SSH or serial console to conduct the attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25071
CVE ID: CVE-2024-7518 State: PUBLISHED Published: 2024-08-06T12:38:12.470Z Last Updated: 2024-10-29T19:51:38.686Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Fullscreen notification dialog can be obscured by document content Description: Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1875354 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/secur
a.org/show_bug.cgi?id=1875354 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-35/ - https://www.mozilla.org/security/advisories/mfsa2024-37/
CVE ID: CVE-2024-7519 State: PUBLISHED Published: 2024-08-06T12:38:12.854Z Last Updated: 2024-08-07T20:49:22.889Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Out of bounds memory access in graphics shared memory handling Description: Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1902307 - https://www.mozill
Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1902307 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-34/ - https://www.mozilla.org/security/advisories/mfsa2024-35/ - https://www.mozilla.org/security/advisories/mfsa2024-37/ - https://www.mozilla.org/security/advisories/mfsa2024-38/
CVE ID: CVE-2024-7520 State: PUBLISHED Published: 2024-08-06T12:38:13.117Z Last Updated: 2025-03-24T16:39:36.894Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Type confusion in WebAssembly Description: A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1903041 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-35/ - https://www.mozilla.org/security
ty/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-35/ - https://www.mozilla.org/security/advisories/mfsa2024-37/
CVE ID: CVE-2024-7521 State: PUBLISHED Published: 2024-08-06T12:38:13.406Z Last Updated: 2024-08-07T20:58:56.811Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Incomplete WebAssembly exception handing Description: Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1904644 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-34/ - https://w
/www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-34/ - https://www.mozilla.org/security/advisories/mfsa2024-35/ - https://www.mozilla.org/security/advisories/mfsa2024-37/ - https://www.mozilla.org/security/advisories/mfsa2024-38/
CVE ID: CVE-2024-7522 State: PUBLISHED Published: 2024-08-06T12:38:13.630Z Last Updated: 2024-08-08T16:02:54.096Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Out of bounds read in editor component Description: Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1906727 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-
06727 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-34/ - https://www.mozilla.org/security/advisories/mfsa2024-35/ - https://www.mozilla.org/security/advisories/mfsa2024-37/ - https://www.mozilla.org/security/advisories/mfsa2024-38/
CVE ID: CVE-2024-7523 State: PUBLISHED Published: 2024-08-06T12:38:15.776Z Last Updated: 2025-03-14T15:16:08.570Z Vendors: Mozilla Products: Firefox Problem Types: Document content could partially obscure security prompts Description: A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. *This issue only affects Android versions of Firefox.* This vulnerability affects Firefox < 129. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1908344 - https://www.mozilla.org/security/advisories/mfsa2024-33/
CVE ID: CVE-2024-7524 State: PUBLISHED Published: 2024-08-06T12:38:13.921Z Last Updated: 2025-03-25T16:30:45.591Z Vendors: Mozilla Products: Firefox, Firefox ESR Problem Types: CSP strict-dynamic bypass using web-compatibility shims Description: Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection. On a site protected by Content Security Policy in "strict-dynamic" mode, an attacker able to inject an HTML element could have used a DOM Clobbering attack on some of the shims and achieved XSS, bypassing the CSP strict-dynamic protection. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, and Firefox ESR < 128.1. Additional An
namic protection. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, and Firefox ESR < 128.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1909241 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-34/ - https://www.mozilla.org/security/advisories/mfsa2024-35/
CVE ID: CVE-2024-7525 State: PUBLISHED Published: 2024-08-06T12:38:14.195Z Last Updated: 2024-08-06T22:21:43.959Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Missing permission check when creating a StreamFilter Description: It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1909298 - https://www.mozilla.o
tes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1909298 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-34/ - https://www.mozilla.org/security/advisories/mfsa2024-35/ - https://www.mozilla.org/security/advisories/mfsa2024-37/ - https://www.mozilla.org/security/advisories/mfsa2024-38/
CVE ID: CVE-2024-7526 State: PUBLISHED Published: 2024-08-06T12:38:14.456Z Last Updated: 2024-09-17T18:14:47.411Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Uninitialized memory used by WebGL Description: ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1910306 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - http
- https://bugzilla.mozilla.org/show_bug.cgi?id=1910306 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-34/ - https://www.mozilla.org/security/advisories/mfsa2024-35/ - https://www.mozilla.org/security/advisories/mfsa2024-37/ - https://www.mozilla.org/security/advisories/mfsa2024-38/
CVE ID: CVE-2024-7527 State: PUBLISHED Published: 2024-08-06T12:38:14.698Z Last Updated: 2025-03-18T19:05:01.797Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Use-after-free in JavaScript garbage collection Description: Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1871303 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-
71303 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-34/ - https://www.mozilla.org/security/advisories/mfsa2024-35/ - https://www.mozilla.org/security/advisories/mfsa2024-37/ - https://www.mozilla.org/security/advisories/mfsa2024-38/
CVE ID: CVE-2024-7528 State: PUBLISHED Published: 2024-08-06T12:38:14.946Z Last Updated: 2024-08-09T15:10:55.362Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Use-after-free in IndexedDB Description: Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1895951 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-35/ - https://www.mozilla.org/security/advisories/mfsa2024-
4-33/ - https://www.mozilla.org/security/advisories/mfsa2024-35/ - https://www.mozilla.org/security/advisories/mfsa2024-37/
CVE ID: CVE-2024-7529 State: PUBLISHED Published: 2024-08-06T12:38:15.245Z Last Updated: 2024-08-07T20:55:22.507Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Document content could partially obscure security prompts Description: The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1903187 - https://www.mozilla.org/security/advisories/mfs
nt: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1903187 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-34/ - https://www.mozilla.org/security/advisories/mfsa2024-35/ - https://www.mozilla.org/security/advisories/mfsa2024-37/ - https://www.mozilla.org/security/advisories/mfsa2024-38/
CVE ID: CVE-2024-7530 State: PUBLISHED Published: 2024-08-06T12:38:16.077Z Last Updated: 2024-08-08T17:54:29.302Z Vendors: Mozilla Products: Firefox Problem Types: Use-after-free in JavaScript code coverage collection Description: Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1904011 - https://www.mozilla.org/security/advisories/mfsa2024-33/
CVE ID: CVE-2024-7531 State: PUBLISHED Published: 2024-08-06T12:38:15.496Z Last Updated: 2025-03-19T15:51:59.396Z Vendors: Mozilla Products: Firefox, Firefox ESR Problem Types: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines Description: Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor. In Firefox this only affects the QUIC header protection feature when the connection is using the ChaCha20-Poly1305 cipher suite. The most likely outcome is connection failure, but if the connection persists despite the high packet loss it could be possible for a network obs
s connection failure, but if the connection persists despite the high packet loss it could be possible for a network observer to identify packets as coming from the same source despite a network path change. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, and Firefox ESR < 128.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1905691 - https://www.mozilla.org/security/advisories/mfsa2024-33/ - https://www.mozilla.org/security/advisories/mfsa2024-34/ - https://www.mozilla.org/security/advisories/mfsa2024-35/
CVE ID: CVE-2024-7532 State: PUBLISHED Published: 2024-08-06T20:19:02.035Z Last Updated: 2024-08-07T15:44:29.621Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/350528343
CVE ID: CVE-2024-7533 State: PUBLISHED Published: 2024-08-06T20:19:02.349Z Last Updated: 2024-08-07T19:24:53.673Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/353552540
CVE ID: CVE-2024-7534 State: PUBLISHED Published: 2024-08-06T20:19:02.827Z Last Updated: 2024-10-15T13:44:15.300Z Vendors: Google Products: Chrome Problem Types: CWE-122 Description: Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/352467338
CVE ID: CVE-2024-7535 State: PUBLISHED Published: 2024-08-06T20:19:03.090Z Last Updated: 2024-10-24T19:57:15.650Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/352690885
CVE ID: CVE-2024-7536 State: PUBLISHED Published: 2024-08-06T20:19:03.320Z Last Updated: 2024-08-06T20:38:29.280Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/354847246
CVE ID: CVE-2024-7537 State: PUBLISHED Published: 2024-08-05T23:53:37.224Z Last Updated: 2024-08-06T13:56:32.912Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: oFono Products: oFono Problem Types: CWE-125 Description: oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SMS message lists. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allo
sue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-23157. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1077/
CVE ID: CVE-2024-7538 State: PUBLISHED Published: 2024-08-05T23:53:40.911Z Last Updated: 2024-08-06T19:55:03.568Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: oFono Products: oFono Problem Types: CWE-121 Description: oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The specific flaw exists within the parsing of responses from AT Commands. The issue results from the lack of proper validation of the length of u
ithin the parsing of responses from AT Commands. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-23190. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1078/
CVE ID: CVE-2024-7539 State: PUBLISHED Published: 2024-08-05T23:53:44.798Z Last Updated: 2024-08-06T13:48:46.835Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: oFono Products: oFono Problem Types: CWE-121 Description: oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The specific flaw exists within the parsing of responses from AT+CUSD commands. The issue results from the lack of proper validation of the length of user-su
arsing of responses from AT+CUSD commands. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-23195. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1079/