CVE-2024-47249

MEDIUM Year: 2024
CVSS v3 Score
5.0
Medium
Weakness Type
CWE-129
View all →

Vulnerability Description

Improper Validation of Array Index vulnerability in Apache NimBLE. Lack of input validation for HCI events from controller could result in out-of-bound memory corruption and crash. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue.

Related Vulnerabilities

CVE-2005-0369

MEDIUM
CVSS:5.3(Medium)

Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service (application crash) via a packet with a large (1) descriptor ID or (2) claim...

CWE-1292005

CVE-2024-21493

MEDIUM
CVSS:5.3(Medium)

All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing functions in the affected library do not ...

CWE-1292024

CVE-2024-26755

MEDIUM
CVSS:5.3(Medium)

In the Linux kernel, the following vulnerability has been resolved: md: Don't suspend the array for interrupted reshape md_start_sync() will suspend the array if there are spares that can be added or ...

CWE-1292024

CVE-2024-38587

MEDIUM
CVSS:5.3(Medium)

In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values. This code should be using ARRAY_SIZE() (which...

CWE-1292024

CVE-2024-41564

MEDIUM
CVSS:5.3(Medium)

EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and d...

CWE-1292024

CVE-2024-41565

MEDIUM
CVSS:5.3(Medium)

JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI...

CWE-1292024