CVE-2026-43233 is a high-severity vulnerability in the Linux kernel's netfilter nf_conntrack_h323 module. It involves an out-of-bounds read in the decode_choice() function caused by an improper boundary check using an uninitialized length variable. This flaw can be triggered remotely by sending a crafted Q.931 SETUP message with specific PER-encoded data to port 1720 through a firewall with the nf_conntrack_h323 helper enabled. The vulnerability may lead to a heap-buffer-overflow read, potentially impacting system stability or security.