High severity · published Apr 6, 2024
CVE-2024-24746
Apache NimBLE: Denial of service in NimBLE Bluetooth stack
7.5
CVSS
1.4%
EPSS
No
On KEV
Description
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE.
Specially crafted GATT operation can cause infinite loop in GATT server leading to denial of service in Bluetooth stack or device.
This issue affects Apache NimBLE: through 1.6.0.
Users are recommended to upgrade to version 1.7.0, which fixes the issue.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Apache NimBLE · Apache Software Foundation
through 1.6.0 · source: vendor
NI
Nimble · Apache
before 1.7.0 · source: NVD, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-24746
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-24746
Mailing List
http://www.openwall.com/lists/oss-security/2024/04/05/2
Patch
https://github.com/apache/mynewt-nimble/commit/d42a0ebe6632bd0c318560e4293a522634f60594
Mailing List
https://lists.apache.org/thread/bptkzc0o2ymjk8qqzqdmy39kcmh27078
More from Apache NimBLE
8.8
CVE-2026-45813
Apache NimBLE: Incorrect data validation in BASS add/modify source operation
7.5
CVE-2026-45816
Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request
7.5
CVE-2026-45815
Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler
7.5
CVE-2026-45811
Apache NimBLE: Buffer overflow in socket HCI transport
7.5
CVE-2024-51569
Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler