https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:34:03.405936+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-06941 bdu:2024-06941 2026-10-02T17:34:03.513955+00:00 bdu:2024-06941 https://cve.radiocsirt.org/vuln/euvd-2026-259080 EUVD-2026-259080 2026-10-02T17:34:03.513992+00:00 EUVD-2026-259080 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2794 fkie_cve-2023-2794 2026-10-02T17:34:03.514006+00:00

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver().

 https://cve.radiocsirt.org/vuln/ghsa-qcrm-33g9-cjcc GHSA-qcrm-33g9-cjcc 2026-10-02T17:34:03.514037+00:00

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver().

 https://cve.radiocsirt.org/vuln/gsd-2023-2794 gsd-2023-2794 2026-10-02T17:34:03.514054+00:00 gsd-2023-2794 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11095-1 openSUSE-SU-2026:11095-1 — ofono-2.19-3.1 on GA media 2026-10-02T17:34:03.514065+00:00

ofono-2.19-3.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-2794 UBUNTU-CVE-2023-2794 2026-10-02T17:34:03.514087+00:00

Affected: Ubuntu:Pro:16.04:LTS: ofono, Ubuntu:Pro:18.04:LTS: ofono, Ubuntu:Pro:20.04:LTS: ofono, Ubuntu:22.04:LTS: ofono, Ubuntu:24.04:LTS: ofono, Ubuntu:25.10: ofono, Ubuntu:26.04:LTS: ofono

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver().