Threats Tagged 'ghsa-mc27-476h-fwpg'

A buffer overflow vulnerability exists in Apache NimBLE through version 1.9.0 due to improper size checking when copying received HCI events into the event pool. Exploitation requires a misconfigured event pool size or a malicious/compromised controller on the HCI socket link, and cannot be triggered via over-the-air Bluetooth access. The vulnerability is fixed in version 1.10.0.