CVE-2024-7544

CVE-2024-7544 is a heap-based buffer overflow vulnerability in oFono's SimToolKit, specifically affecting the ofono_project ofono product. This flaw allows a local attacker to achieve privilege escalation and execute arbitrary code by exploiting improper validation of user-supplied data lengths during STK command PDU parsing. With a CVSS score of 7.8 (High), successful exploitation grants an attacker high confidentiality, integrity, and availability impact, though it requires initial code execution on the target modem. Currently, there is no known public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.