CVE-2024-7547 is a critical stack-based buffer overflow vulnerability in oFono, a modem management software. This flaw allows local attackers with code execution capabilities on the modem to potentially escalate privileges and execute arbitrary code.

Specifically, CVE-2024-7547 arises from insufficient validation of user-supplied data length during SMS PDU parsing, leading to a buffer overflow. While the CVSS score is 7.8, indicating high severity, the SOCRadar Vulnerability Risk Score (SVRS) of 70 suggests a notable level of risk and warrants careful review, but is not considered a critical vulnerability based on the SVRS threshold of 80. Exploiting this vulnerability could grant attackers control within the service account context, allowing for malicious activities. Mitigating this vulnerability is crucial to prevent unauthorized access and maintain system integrity. Though not critical, system administrators should prioritize patching this flaw due to potential for privilege escalation and arbitrary code execution. Timely updates and robust input validation are vital to defend against similar attacks.