Wei Che Kao

Researcher fromNational Yang Ming Chiao Tung University, Dept. of CS, Security and Systems Lab.

#19309of 60,450

16.1Total CVSS

Vulnerabilities · 2

Medium

1

Critical

1

A Buffer Copy without Checking Size of Input, also known as a 'Classic Buffer Overflow', vulnerability in Apache NimBLE could result in memory corruption when a specially crafted MESH message is used and a non-default build configuration is applied. Users are recommended to upgrade to a newer version to fix the issue.

The issue allows a remote attacker to execute arbitrary code via the `pb adv handle tranaction cont` function in the src/mesh/pb adv.c component. This is a Buffer Overflow vulnerability.