Apache Nimble vulnerabilities

• apache nimble Apache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failure CVE-2026-46452 5.3 MediumJuly 24, 2026
• apache nimble Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request CVE-2026-45816 7.5 HighJuly 24, 2026
• apache nimble Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler CVE-2026-45815 7.5 HighJuly 24, 2026
• apache nimble Apache NimBLE: Incorrect data validation in BASS add/modify source operation CVE-2026-45813 8.8 HighJuly 24, 2026
• apache nimble Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report Handler CVE-2026-45812 6.5 MediumJuly 24, 2026
• apache nimble Apache NimBLE: Buffer overflow in socket HCI transport CVE-2026-45811 7.5 HighJuly 24, 2026
• apache nimble, apache software foundation mynewt nimble +1 more Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller CVE-2025-52435 7.5 HighJanuary 10, 2026
• apache nimble, apache software foundation mynewt nimble +1 more Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver CVE-2025-53470 3.1 LowJanuary 10, 2026
• apache nimble, apache software foundation mynewt nimble +1 more Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layer CVE-2025-53477 7.5 HighJanuary 10, 2026
• apache nimble, apache software foundation mynewt nimble +1 more Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing CVE-2025-62235 8.1 HighJanuary 10, 2026
• apache nimble Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler CVE-2024-51569 7.5 HighNovember 26, 2024
• apache nimble Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access CVE-2024-47250 5.0 MediumNovember 26, 2024
• apache nimble Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler CVE-2024-47249 5.0 MediumNovember 26, 2024
• apache nimble Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack CVE-2024-47248 6.3 MediumNovember 26, 2024
• apache nimble Apache NimBLE: Denial of service in NimBLE Bluetooth stack CVE-2024-24746 7.5 HighApril 6, 2024