High severity8.1NVD Advisory· Published Apr 17, 2024· Updated Jun 17, 2026
CVE-2023-4232
CVE-2023-4232
Description
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_status_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_status_report().
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
- osv-coords2 versionspkg:rpm/opensuse/ofono&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/ofono&distro=openSUSE%20Leap%2016.0
< 2.19-3.1+ 1 more
- (no CPE)range: < 2.19-3.1
- (no CPE)range: < 2.19-bp160.1.1
Patches
Vulnerability mechanics
References
2- bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingThird Party Advisory
- lists.fedoraproject.org/archives/list/[email protected]/message/RLAWJAAS3HDI2KMCZXF4DMR3Y4BQNMKO/nvd
News mentions
0No linked articles in our index yet.