CVE-2024-51569

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-51569

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-51569.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-51569

Published

2024-11-26T11:17:56.337Z

Modified

2026-07-22T03:35:44.651203Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler

Details

Out-of-bounds Read vulnerability in Apache NimBLE.

Missing proper validation of HCI Number Of Completed Packets could lead to out-of-bound access when parsing HCI event and invalid read from HCI transport memory. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0.

Users are recommended to upgrade to version 1.8.0, which fixes the issue.

Database specific

{
    "cwe_ids": [
        "CWE-125"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/51xxx/CVE-2024-51569.json",
    "cna_assigner": "apache"
}

References

Affected packages

Git / github.com/apache/mynewt-nimble

Affected ranges

Type

GIT

Repo

https://github.com/apache/mynewt-nimble

Events

Introduced

Fixed

ca67e3015eec30eb97c853112441082d709e43ba

Fixed

4e3ac5b6e7c7df63a594c4ff6839e266b4ccfed9

Database specific

{
    "cpe": "cpe:2.3:a:apache:nimble:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.8.0"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

Other

nimble_1_5_0_rc1_tag

nimble_1_5_0_tag

nimble_1_6_0_rc1_tag

nimble_1_6_0_tag

nimble_1_7_0_rc1_tag

nimble_1_7_0_tag

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "source": "https://github.com/apache/mynewt-nimble/commit/4e3ac5b6e7c7df63a594c4ff6839e266b4ccfed9",
        "deprecated": false,
        "target": {
            "file": "nimble/host/src/ble_hs_hci_evt.c",
            "function": "ble_hs_hci_evt_num_completed_pkts"
        },
        "id": "CVE-2024-51569-ac6733fa",
        "signature_type": "Function",
        "digest": {
            "length": 688.0,
            "function_hash": "149545795026646355959144903601164278261"
        }
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/apache/mynewt-nimble/commit/4e3ac5b6e7c7df63a594c4ff6839e266b4ccfed9",
        "deprecated": false,
        "target": {
            "file": "nimble/host/src/ble_hs_hci_evt.c"
        },
        "id": "CVE-2024-51569-fb7685e1",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "291555549076039423046587085229551515186",
                "72738967634729289054543148522589364227",
                "73950164890749064837400529637942075084"
            ]
        }
    }
]

vanir_signatures_modified

"2026-07-22T03:35:44Z"

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-51569.json"