CyberRota Analysis
AI-GeneratedApache NimBLE versions up to 1.9.0 are vulnerable to a reachable assertion flaw in the ATT parser, triggered by a specially crafted Bluetooth Low Energy (BLE) request. This vulnerability could lead to denial of service conditions, making it critical for developers and organizations using affected versions to prioritize upgrading to version 1.10.0 to mitigate potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) may trigger assert in ATT parser. Severity is medium as this requires DUT to first send ATT Read Multiple Variable Request. This issue affects Apache NimBLE: through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)