oFono

oFono is an open-source telephony framework for Linux that manages mobile broadband and voice communication. This vulnerability has a high severity rating of 7.4 and requires local access to exploit, with no authentication or user interaction needed, but could allow an attacker to compromise confidentiality, integrity, and availability of the system. Security teams should monitor for patches following the July 28, 2026 vendor deadline and prioritize updates for systems running oFono, particularly on devices where local access could be gained.