CVE-2024-47249

Summary

CVE-2024-47249 is an Improper Validation of Array Index vulnerability found in Apache NimBLE. This issue stems from a lack of input validation for HCI events from controllers, potentially resulting in out-of-bound memory corruption and a crash. However, this vulnerability only poses a threat if the Bluetooth controller is malfunctioning or compromised, which reduces its severity. Affected versions of Apache NimBLE include those up to 1.7.0. To mitigate this issue, users should upgrade to version 1.8.0, which addresses the vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.