CVE-2023-4232

Name of the Vulnerable Software and Affected Versions ofono (affected versions not specified)

Description A flaw was found in ofono, an Open Source Telephony on Linux, where a stack overflow bug is triggered within the decode status report() function during SMS decoding. The attack scenario is assumed to be accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for the memcpy length in decode submit(), but it was forgotten in decode status report(). This vulnerability may allow a remote attacker to access confidential data, disrupt its integrity, and cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.