https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:52:55.713320+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-4232 CVE-2023-4232 — Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() fu… 2026-10-04T15:52:55.746761+00:00

Affected: ofono, Fedora

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_status_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_status_report().

 https://cve.radiocsirt.org/vuln/usn-7151-1 USN-7151-1 — ofono vulnerabilities 2026-10-04T15:52:55.746831+00:00

Affected: Ubuntu:Pro:16.04:LTS: ofono, Ubuntu:Pro:18.04:LTS: ofono, Ubuntu:Pro:20.04:LTS: ofono, Ubuntu:22.04:LTS: ofono, Ubuntu:24.04:LTS: ofono

It was discovered that oFono incorrectly handled decoding SMS messages leading to a stack overflow. A remote attacker could potentially use this issue to cause a denial of service. (CVE-2023-4232, CVE-2023-4235)