CVE-2024-47248

概要

参考情報

• apache/mynewt-nimble commit 4f75c0b · Patch
• lists.apache.org/thread/z8m7jqh54xybf9kz8q2l3tz92zsj7tmz · Mailing List
• openwall.com/lists/oss-security/2024/11/26/2 · Mailing List

nimble のその他の脆弱性

• CVE-2026-46452中 5.3Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken data toward application…
• CVE-2026-45816高 7.5NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asserts (otherwise assert…
• CVE-2026-45815高 7.5Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) m…
• CVE-2026-45813高 8.8Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service. Improper validation when parsing BA…
• CVE-2026-45812中 6.5Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event. When a single HCI …