Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fw6g-5qw9-p3mx

Опубликовано: 26 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5

Описание

Improper Validation of Array Index vulnerability in Apache NimBLE.

Lack of input validation for HCI events from controller could result in out-of-bound memory corruption and crash. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0.

Users are recommended to upgrade to version 1.8.0, which fixes the issue.

Improper Validation of Array Index vulnerability in Apache NimBLE.

Lack of input validation for HCI events from controller could result in out-of-bound memory corruption and crash. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0.

Users are recommended to upgrade to version 1.8.0, which fixes the issue.

EPSS

Процентиль: 5%
0.00021
Низкий

5 Medium

CVSS3

Дефекты

CWE-129

Связанные уязвимости

CVSS3: 5
nvd
около 1 года назад

Improper Validation of Array Index vulnerability in Apache NimBLE. Lack of input validation for HCI events from controller could result in out-of-bound memory corruption and crash. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue.

EPSS

Процентиль: 5%
0.00021
Низкий

5 Medium

CVSS3

Дефекты

CWE-129