High severity8.1NVD Advisory· Published Apr 17, 2024· Updated Jun 17, 2026

CVE-2023-4234

Description

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_submit_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_submit_report().

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ofono Project/Ofono
cpe:2.3:a:ofono_project:ofono:*:*:*:*:*:*:*:*
Range: <2.1
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
Ofono/Ofonollm-fuzzy
osv-coords2 versions
pkg:rpm/opensuse/ofono&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/ofono&distro=openSUSE%20Tumbleweed
< 2.19-bp160.1.1+ 1 more
- (no CPE)range: < 2.19-bp160.1.1
- (no CPE)range: < 2.19-3.1
Fedorahosted/Fedoracpe-rescue

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingThird Party Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/NBTPKR3LYTTLROPXF77FL4SPLXVHNC4T/nvd
lists.fedoraproject.org/archives/list/[email protected]/message/VG6FHQITWUNHBDGPXUQ77SZK5O5BYIBZ/nvd

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000