CVE-2023-48403

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In sms_DecodeCodedTpMsg of sms_PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure if the attacker is able to observe the behavior of the subsequent switch conditional with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Dec 8, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-484047.5In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds cheCVE-2023-484056.7there is a possible way for the secure world to write to NS memory due to a logic error in the code. This could lead to local escalation of CVE-2023-484066.7there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. This could lead to locaCVE-2023-484077.8there is a possible DCK won't be deleted after factory reset due to a logic error in the code. This could lead to local escalation of privilCVE-2023-484085.5In ProtocolNetSimFileInfoAdapter() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This couCVE-2023-484097.8In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there is a possible out oCVE-2023-48415.4The Feeds for YouTube plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'youtube-feed' shortcode in versions up to, and CVE-2023-484107.5In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information diCVE-2023-484115.5In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing boundsCVE-2023-484125.5In private_handle_t of mali_gralloc_buffer.h, there is a possible information leak due to a logic error in the code. This could lead to locCVE-2023-484134.9In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informatiCVE-2023-484146.7In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of priv
CVE-2023-48403: High severity, CVSS 7.5 | Vulnix