CVE-2023-4235

CVSS 3.1 Score 8.1 of 10 (high)

Details

Published Apr 17, 2024
Updated: Apr 18, 2024
CWE ID 119

Summary

CVE-2023-4235 is a vulnerability found in ofono, an Open Source Telephony on Linux. It is a stack overflow bug that occurs during SMS decoding in the decode_deliver_report() function. The flaw can be exploited by a compromised modem, a malicious base station, or through SMS. While there is a boundary check for memcpy length in decode_submit(), it was forgotten in decode_deliver_report(). The vulnerability has been rated as HIGH severity with a base score of 8.1 and an impact score of 5.9. It poses a potential danger to organizations as it could lead to unauthorized access, data integrity issues, and confidentiality breaches. Remediating the vulnerability requires patching or updating the affected systems with the latest version of ofono.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-4235 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options