Apache NimBLE：NimBLE MESH 蓝牙堆栈中的缓冲区溢出（CVE-2024-47248）
CVE编号
CVE-2024-47248
利用情况
暂无
补丁情况
N/A
披露时间
2024-11-26
漏洞描述
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE.
Specially crafted MESH message could result in memory corruption when non-default build configuration is used.
This issue affects Apache NimBLE: through 1.7.0.
Users are recommended to upgrade to version 1.8.0, which fixes the issue.
解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
文章评论