Wei Che Kao

باحث منNational Yang Ming Chiao Tung University, Dept. of CS, Security and Systems Lab.

#19309من 60,450

16.1إجمالي CVSS

الثغرات · 2

متوسطة

1

حرجة

1

A Buffer Copy without Checking Size of Input, also known as a 'Classic Buffer Overflow', vulnerability in Apache NimBLE could result in memory corruption when a specially crafted MESH message is used and a non-default build configuration is applied. Users are recommended to upgrade to a newer version to fix the issue.

The issue allows a remote attacker to execute arbitrary code via the `pb adv handle tranaction cont` function in the src/mesh/pb adv.c component. This is a Buffer Overflow vulnerability.