CVE-2023-4235

What it actually does

Stack-based buffer overflow in ofono's decode_deliver_report() function caused by an unchecked memcpy length during SMS deliver report decoding, allowing memory corruption from a malicious SMS, compromised modem, or rogue base station.

Why it matters to the business

Potential remote code execution or denial of service on Linux systems using ofono for cellular telephony, risking device compromise in embedded, mobile, or IoT environments; low immediate risk given stable low exploitation probability and no known campaigns.

How an attack unfolds

An attacker crafts a malicious SMS deliver report (or delivers it via compromised modem or fake base station) that reaches ofono's SMS decoding path; the missing bounds check in decode_deliver_report() permits an oversized memcpy that overflows the stack, enabling control-flow hijacking.

How to fix it

Update ofono to the commit 54aa82cbbe3e3bf29dea7eaf35adbc91b94df2ae or later; rebuild and redeploy packages containing the fix; verify the patch is present in deployed binaries.

How to confirm the fix worked

Confirm the running ofono binary or source contains commit 54aa82cbbe3e3bf29dea7eaf35adbc91b94df2ae; re-test SMS decoding paths with boundary-case PDUs; monitor process stability under crafted input.

Typical attack path

1. Obtain delivery path to target via SMS, rogue base station, or compromised modem
2. Send specially crafted deliver report PDU that bypasses the length check present in decode_submit()
3. Trigger decode_deliver_report() which performs unbounded memcpy
4. Overwrite stack data to achieve code execution or crash the ofono process

How to detect it

Review ofono process logs and system crash dumps for segmentation faults or stack-smashing events during SMS deliver-report processing; correlate with receipt of unexpected SMS PDUs.

What your security team should do

• Apply the upstream fix at commit 54aa82cbbe3e3bf29dea7eaf35adbc91b94df2ae immediately on all affected systems
• Inventory all deployments of ofono and schedule updates
• Add ofono to the vulnerability management program with automated checks for new releases
• Harden SMS handling surfaces where possible (carrier filtering, modem isolation)