CVE-2024-7543

Summary

CVE-2024-7543 is a heap-based buffer overflow vulnerability affecting oFono's SimToolKit. This issue allows local attackers to execute arbitrary code on affected modems, given they have the ability to execute code on the target. The flaw is situated in the parsing of STK command PDUs, where user-supplied data lacks proper validation before copying to a heap-based buffer. Successful exploitation grants attackers the privilege of the service account. (ZDI-CAN-23456)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.