VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 26, 2024· Updated Dec 6, 2024

Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack

CVE-2024-47248

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE.

Specially crafted MESH message could result in memory corruption when non-default build configuration is used. This issue affects Apache NimBLE: through 1.7.0.

Users are recommended to upgrade to version 1.8.0, which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Apache/NimBLEllm-fuzzy
    Range: <=1.7.0
  • Apache Software Foundation/Apache NimBLEv5
    Range: 0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.