{"id":"CVE-2024-24746","summary":"Apache NimBLE: Denial of service in NimBLE Bluetooth stack","details":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE. \n\nSpecially crafted GATT operation can cause infinite loop in GATT server leading to denial of service in Bluetooth stack or device.\n\nThis issue affects Apache NimBLE: through 1.6.0.\nUsers are recommended to upgrade to version 1.7.0, which fixes the issue.","modified":"2026-08-12T15:15:04.508723Z","published":"2024-04-06T11:56:07.232Z","database_specific":{"cna_assigner":"apache","cwe_ids":["CWE-835"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24746.json"},"references":[{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2024/04/05/2"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24746.json"},{"type":"ADVISORY","url":"https://lists.apache.org/thread/bptkzc0o2ymjk8qqzqdmy39kcmh27078"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24746"},{"type":"FIX","url":"https://github.com/apache/mynewt-nimble/commit/d42a0ebe6632bd0c318560e4293a522634f60594"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/mynewt-nimble","events":[{"introduced":"0"},{"fixed":"675452b62822efd3e3fd28ac55eb166baf8461f4"},{"fixed":"d42a0ebe6632bd0c318560e4293a522634f60594"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"1.7.0"}],"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:apache:nimble:*:*:*:*:*:*:*:*"}}],"versions":["nimble_1_6_0_tag","nimble_1_6_0_rc1_tag","nimble_1_5_0_tag","nimble_1_5_0_rc1_tag"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-24746.json","vanir_signatures_modified":"2026-08-12T15:15:04Z","vanir_signatures":[{"source":"https://github.com/apache/mynewt-nimble/commit/d42a0ebe6632bd0c318560e4293a522634f60594","target":{"file":"nimble/host/src/ble_hs_conn.c","function":"ble_hs_conn_timer"},"deprecated":false,"digest":{"function_hash":"53986687227134710695852156119314063968","length":961},"id":"CVE-2024-24746-971a3c22","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2024-24746-af12cf56","signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/mynewt-nimble/commit/d42a0ebe6632bd0c318560e4293a522634f60594","target":{"file":"nimble/host/src/ble_hs_conn.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["97831110093431968365261876647432253342","302729833942722736022234195057002629601","72640064505082759968274115016590363364","204867718319825219640071574365335623388","182024431897690743091294727893691863308","311107538362999311035953585066228031780","87724426556823156090643657689661510763","112494626048604231208221056805023632321","99979523209188709641095462448660491108","258638179473428267784383656725075531482","206554961427126153293010978959260477652","37763717211476863564393998721568720553","35479274564962493721888012188328854788","252211458846223473257950435155928362528","205091948598678685731509114610179232636","339349673885123292914784783750273038527","266158485003498149034662059029352297956","118198636142470794555900077363487950683","117497034849741932650323819125851594771","298834888526193422025115859452742393620","316644111136980668885961568193634655901","31177037011020221814936775344630694896","195104730569933812801881417569724137406","10337585646081350396498598440914862907","115965774066410778682915443119732154922","197380985718713263363761995769195031036","104850396417464898818213020461048158416","71287956839636979136585311937726076620","118198636142470794555900077363487950683","117497034849741932650323819125851594771","298834888526193422025115859452742393620","316644111136980668885961568193634655901","142831876271773481442433228926619780903","288209675771040278473259439712579186865","194231714249816697885080011234107511497","264159338933495963141145850912718255829","17861696002330486113726913553313626395","302586208504001099702523715571533741137","193205579960248382239813917629355371512","206184631046789132821774820429578216880","31319810570997238390331214451428686772","149493731105953891431769766680814736648","309080504090045895355522783351184085572","75838121311038212803479986472777911802","323987540134461071562231007451748714200"]}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}