High severity8.1NVD Advisory· Published Apr 17, 2024· Updated Jun 17, 2026
CVE-2023-4235
CVE-2023-4235
Description
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver_report().
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Fedora/Fedorav5
Patches
Vulnerability mechanics
References
2- bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLAWJAAS3HDI2KMCZXF4DMR3Y4BQNMKO/nvd
News mentions
0No linked articles in our index yet.