CVE-2023-4233

Name of the Vulnerable Software and Affected Versions ofono (affected versions not specified)

Description A flaw was found in ofono, an Open Source Telephony on Linux, where a stack overflow bug is triggered within the sms decode address field() function during the SMS PDU decoding. This issue can be exploited remotely, potentially allowing an attacker to execute arbitrary code. The attack scenario is assumed to be accessible from a compromised modem, a malicious base station, or just SMS.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.