CVE-2023-2794

ofono on Linux is affected by a stack-based buffer overflow in decode_deliver() during SMS decoding, due to a missing bound check that exists in decode_submit(). This can enable remote code execution when an attacker sends crafted SMS or via a compromised modem/malicious base station. Connected a...

CVE-2023-4235

CVE-2023-4235 — ofono SMS decoding stack overflow Affected software: ofono (Open Source Telephony stack on Linux). Vulnerability: A stack-based buffer overflow occurs in the decode_deliver_report() path used for SMS decoding. The issue stems from a missing bound check for the memcpy length in dec...

CVE-2023-4234

CVE-2023-4234 affects ofono (Open Source Telephony on Linux). The vulnerability is a stack-based buffer overflow triggered in decode_submit_report() during SMS decoding, with a bound check missing for the memcpy length in that function. Attack surface is plausible from a compromised modem, malici...

CVE-2023-4233

CVE-2023-4233 describes a stack-based buffer overflow in ofono’s sms_decode_address_field() during SMS PDU decoding, enabling potential remote code execution. The vulnerability is tied to ofono on Linux and is considered exploitable from remote sources such as compromised modems or SMS channels. ...

CVE-2023-4232

CVE-2023-4232 affects ofono on Linux. A stack overflow in the decode_status_report() path during SMS decoding (missing bound check for memcpy length) can be triggered remotely via SMS, modem, or base station access. Impact is high (C, I, A all high) with network access and no user interaction req...