CVE-2024-47249 in NimBLE信息

摘要

由 MITRE • 2024-11-26

Improper Validation of Array Index vulnerability in Apache NimBLE.

Lack of input validation for HCI events from controller could result in out-of-bound memory corruption and crash. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0.

Users are recommended to upgrade to version 1.8.0, which fixes the issue.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2024-09-23

披露

2024-11-26

管理

已接受

条目

VDB-286109

CPE

准备好

CWE

CWE-125 (已确认)

CVSS

5.0 (CNA)

EPSS

0.00622

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2024-47249
NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-47249
CVE Details	https://www.cvedetails.com/cve/CVE-2024-47249/

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!