CVE-2023-4234

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_submit_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_submit_report().

• CWE-119

• https://bugzilla.redhat.com/show_bug.cgi?id=2255399Exploit, Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2255399Exploit, Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NBTPKR3LYTTLROPXF77FL4SPLXVHNC4T/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VG6FHQITWUNHBDGPXUQ77SZK5O5BYIBZ/

Published

Apr 17, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-42328An issue in PeppermintLabs Peppermint v.0.2.4 and before all…8.8
• CVE-2023-4233A flaw was found in ofono, an Open Source Telephony on Linux…8.1
• CVE-2023-42331A file upload vulnerability in EliteCMS v1.01 allows a remot…8.8
• CVE-2023-42334An Indirect Object Reference (IDOR) in Fl3xx Dispatch 2.10.3…6.5
• CVE-2023-42335Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.1…8.8
• CVE-2023-42336An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a rem…9.8
• CVE-2023-42343A Cross Site Scripting vulnerability in Alkacon OpenCms befo…6.1
• CVE-2023-42344Alkacon OpenCms before 10.5.1 allows remote unauthenticated …7.3
• CVE-2023-42345A Cross Site Scripting vulnerability in Alkacon OpenCms befo…6.1
• CVE-2023-42346Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> ref…7.5
• CVE-2023-4235A flaw was found in ofono, an Open Source Telephony on Linux…8.1
• CVE-2023-42358An issue was discovered in O-RAN Software Community ric-plt-…7.7