CVE-2024-51569

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-51569
Out-of-bounds Read vulnerability in Apache NimBLE. Missing proper validation of HCI Number Of Completed Packets could lead to out-of-bound access when parsing HCI event and invalid read from HCI transport memory. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue.
CVSS

No CVSS.

References
Link Resource
http://www.openwall.com/lists/oss-security/2024/11/26/5 Mailing List Vendor Advisory
https://github.com/apache/mynewt-nimble/commit/4e3ac5b6e7c7df63a594c4ff6839e266b4ccfed9 Patch
https://lists.apache.org/thread/q0vs5rddx1lho30xnpsrvpzgxqmywnhs Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:nimble:*:*:*:*:*:*:*:*
History

08 Jul 2025, 14:15

Type Values Removed Values Added
CPE cpe:2.3:a:apache:nimble:*:*:*:*:*:*:*:*
First Time Apache nimble
Apache
References () https://lists.apache.org/thread/q0vs5rddx1lho30xnpsrvpzgxqmywnhs - () https://lists.apache.org/thread/q0vs5rddx1lho30xnpsrvpzgxqmywnhs - Vendor Advisory
References () https://github.com/apache/mynewt-nimble/commit/4e3ac5b6e7c7df63a594c4ff6839e266b4ccfed9 - () https://github.com/apache/mynewt-nimble/commit/4e3ac5b6e7c7df63a594c4ff6839e266b4ccfed9 - Patch
References () http://www.openwall.com/lists/oss-security/2024/11/26/5 - () http://www.openwall.com/lists/oss-security/2024/11/26/5 - Mailing List, Vendor Advisory

06 Dec 2024, 11:15

Type Values Removed Values Added
References
  • () https://github.com/apache/mynewt-nimble/commit/4e3ac5b6e7c7df63a594c4ff6839e266b4ccfed9 -

26 Nov 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-26 12:15

Updated : 2025-07-08 14:15

NVD link : CVE-2024-51569

Mitre link : CVE-2024-51569

JSON object : View

Products Affected

apache

  • nimble
CWE

No CWE.