CVE-2023-4235

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver_report().

• CWE-119

• https://bugzilla.redhat.com/show_bug.cgi?id=2255402Exploit, Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2255402Exploit, Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLAWJAAS3HDI2KMCZXF4DMR3Y4BQNMKO/

Published

Apr 17, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-42336An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a rem…9.8
• CVE-2023-4234A flaw was found in ofono, an Open Source Telephony on Linux…8.1
• CVE-2023-42343A Cross Site Scripting vulnerability in Alkacon OpenCms befo…6.1
• CVE-2023-42344Alkacon OpenCms before 10.5.1 allows remote unauthenticated …7.3
• CVE-2023-42345A Cross Site Scripting vulnerability in Alkacon OpenCms befo…6.1
• CVE-2023-42346Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> ref…7.5
• CVE-2023-42358An issue was discovered in O-RAN Software Community ric-plt-…7.7
• CVE-2023-42359SQL injection vulnerability in Exam Form Submission in PHP w…9.8
• CVE-2023-4236A flaw in the networking code handling DNS-over-TLS queries …7.5
• CVE-2023-42361Local File Inclusion vulnerability in Midori-global Better P…7.8
• CVE-2023-42362An arbitrary file upload vulnerability in Teller Web App v.4…5.4
• CVE-2023-42363A use-after-free vulnerability was discovered in xasprintf f…5.5