VULNERABILITY INTELLIGENCE

CVE-2024-51569

CVSS score7.5 HIGH
EPSS probability1.24%
CISA KEVNot currently listed
Published2024-11-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Out-of-bounds Read vulnerability in Apache NimBLE. Missing proper validation of HCI Number Of Completed Packets could lead to out-of-bound access when parsing HCI event and invalid read from HCI transport memory. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue.

Weakness classification

  • CWE-125: Out-of-bounds Read

Primary references