Apache Software Foundation Nimble vulnerabilities

• apache nimble Apache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failure CVE-2026-46452 5.3 MediumJuly 24, 2026
• apache nimble Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request CVE-2026-45816 7.5 HighJuly 24, 2026
• apache nimble Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler CVE-2026-45815 7.5 HighJuly 24, 2026
• apache nimble Apache NimBLE: Incorrect data validation in BASS add/modify source operation CVE-2026-45813 8.8 HighJuly 24, 2026
• apache nimble Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report Handler CVE-2026-45812 6.5 MediumJuly 24, 2026
• apache nimble Apache NimBLE: Buffer overflow in socket HCI transport CVE-2026-45811 7.5 HighJuly 24, 2026
• apache nimble Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler CVE-2024-51569 7.5 HighNovember 26, 2024
• apache nimble Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access CVE-2024-47250 5.0 MediumNovember 26, 2024
• apache nimble Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler CVE-2024-47249 5.0 MediumNovember 26, 2024
• apache nimble Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack CVE-2024-47248 6.3 MediumNovember 26, 2024
• apache nimble Apache NimBLE: Denial of service in NimBLE Bluetooth stack CVE-2024-24746 7.5 HighApril 6, 2024