https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T20:14:59.628653+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-2794 CVE-2023-2794 — Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() function 2026-10-05T20:14:59.943278+00:00

Affected: ofono, linux ofono

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver().

 https://vulnerability.circl.lu/vuln/usn-7141-1 USN-7141-1 — ofono vulnerabilities 2026-10-05T20:14:59.943440+00:00

Affected: Ubuntu:Pro:16.04:LTS: ofono, Ubuntu:Pro:18.04:LTS: ofono, Ubuntu:Pro:20.04:LTS: ofono, Ubuntu:22.04:LTS: ofono, Ubuntu:24.04:LTS: ofono

It was discovered that oFono incorrectly handled decoding SMS messages leading to a stack overflow. A remote attacker could potentially use this issue to cause a denial of service. (CVE-2023-2794, CVE-2023-4233, CVE-2023-4234)