Apache NimBLE Out-of-Bounds Read Vulnerability in HCI H4 Driver

A vulnerability allowing out-of-bounds read has been identified in the Apache NimBLE HCI H4 driver, affecting versions through 1.8. This vulnerability arises when a specially crafted HCI event leads to an invalid memory read. The issue requires a faulty Bluetooth controller for exploitation, which is why it is considered to have low severity.

Impact

Exploitation of this vulnerability could lead to invalid memory reads, potentially causing memory corruption or allowing for further exploitation.

Remediation

Users are advised to upgrade to Apache NimBLE version 1.9, which addresses this vulnerability.