oFono — Vulnerabilities & Security Advisories 11

oFono serves as the telephony stack for Linux-based mobile devices, handling cellular communications and modem interactions. Historically, it has been susceptible to remote code execution, memory corruption, and privilege escalation vulnerabilities due to improper input validation and boundary checks in its modem communication protocols. The project's 11 recorded CVEs highlight risks in handling malformed network data and insufficient privilege separation between user and system components. While no major public security incidents have been widely documented, the consistent discovery of memory flaws underscores the challenges in securing complex hardware abstraction layers in embedded telephony systems.