CVE-2024-47248

—

CVSS 3.1

6.3 medium

EPSS

<1%p52

Published

Nov 26, 2024 (Nov 26, 2024)

Modified

Jun 17, 2026

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. Specially crafted MESH message could result in memory corruption when non-default build configuration is used. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue.

Vendors: apache
Products: nimble
Weakness: CWE-120
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.