VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 26, 2024· Updated Dec 6, 2024

Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access

CVE-2024-47250

Description

Out-of-bounds Read vulnerability in Apache NimBLE.

Missing proper validation of HCI advertising report could lead to out-of-bound access when parsing HCI event and thus bogus GAP 'device found' events being sent. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0.

Users are recommended to upgrade to version 1.8.0, which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Apache/NimBLEllm-fuzzy
    Range: <=1.7.0
  • Apache Software Foundation/Apache NimBLEv5
    Range: 0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.