CVE-2024-47248 in NimBLEinformation

Résumé

par MITRE • 26/11/2024

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE.

Specially crafted MESH message could result in memory corruption when non-default build configuration is used. This issue affects Apache NimBLE: through 1.7.0.

Users are recommended to upgrade to version 1.8.0, which fixes the issue.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Réserver

23/09/2024

Divulgation

26/11/2024

Modérer

accepté

Entrée

VDB-286108

CPE

prêt

CWE

CWE-120 (confirmé)

CVSS

6.3 (CNA)

EPSS

0.00721

KEV

non

Activités

très faible

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2024-47248
NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-47248
CVE Details	https://www.cvedetails.com/cve/CVE-2024-47248/

◂ Précédent Aperçu Suivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!