VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 26, 2024· Updated Dec 6, 2024

Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler

CVE-2024-47249

Description

Improper Validation of Array Index vulnerability in Apache NimBLE.

Lack of input validation for HCI events from controller could result in out-of-bound memory corruption and crash. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0.

Users are recommended to upgrade to version 1.8.0, which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Apache/NimBLEllm-fuzzy
    Range: <=1.7.0
  • Apache Software Foundation/Apache NimBLEv5
    Range: 0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.