CVE-2024-47249

CVSS V2 None CVSS V3 None

Description

Improper Validation of Array Index vulnerability in Apache NimBLE. Lack of input validation for HCI events from controller could result in out-of-bound memory corruption and crash. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue.

Overview

CVE ID
CVE-2024-47249

Assigner
apache

Vulnerability Status
PUBLISHED

Published Version
2024-11-26T11:16:35.626Z

Last Modified Date
2024-11-26T16:36:38.822Z

Weakness Enumerations

CWE	URL
CWE-129	http://cwe.mitre.org/data/definitions/129.html

References

Reference URL	Reference Tags
https://lists.apache.org/thread/7ckxw6481dp68ons627pjcb27c75n0mq	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-47249
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47249

History

Created	Old Value	New Value	Data Type	Notes
2024-11-27 13:15:39				Added to TrackCVE