Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:ofono:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductOfono (acffd806-6622-538f-a97e-6338faee67b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4235 not_vulnerable 2026-06-08 06:16:11.858299 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function
HIGH (8.1)
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver_report().
Published: 2024-04-17T22:54:27.254Z
Updated: 2025-11-04T18:17:00.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4234 not_vulnerable 2026-06-08 06:16:11.857352 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function
HIGH (8.1)
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_submit_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_submit_report().
Published: 2024-04-17T22:53:32.562Z
Updated: 2025-11-04T18:16:59.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4233 not_vulnerable 2026-06-08 06:16:11.854707 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function
HIGH (8.1)
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS.
Published: 2024-04-17T22:50:49.698Z
Updated: 2025-11-04T18:16:56.833Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4232 not_vulnerable 2026-06-08 06:16:11.844437 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function
HIGH (8.1)
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_status_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_status_report().
Published: 2024-04-17T22:49:12.892Z
Updated: 2025-11-04T18:16:54.347Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.