Approved changes feed: RSS · Atom

cpe:2.3:a:linux:ofono:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLinux (f4ceb328-5d50-5b0b-a2e1-fa3f16dc0244)
ProductOfono (f6f38ba4-16fc-592a-b136-7ea27137b86f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2794 vulnerable 2026-06-03 14:51:43.900128 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() function
HIGH (8.1)
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver().
Published: 2024-04-10T10:15:43.908Z
Updated: 2025-11-04T18:14:26.729Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.