NI
Product
Nimble
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 5Low 1
Watch
Add Nimble to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45813 | 8.8 | Jul 24 | Apache NimBLE: Incorrect data validation in BASS add/modify source operation Affected: before 1.10.0 |
| CVE-2025-62235 | 8.1 | Jan 10 | Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing Affected: before 1.9.0 |
| CVE-2026-45816 | 7.5 | Jul 24 | Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request Affected: before 1.10.0 |
| CVE-2026-45815 | 7.5 | Jul 24 | Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler Affected: before 1.10.0 |
| CVE-2026-45811 | 7.5 | Jul 24 | Apache NimBLE: Buffer overflow in socket HCI transport Affected: before 1.10.0 |
| CVE-2025-52435 | 7.5 | Jan 10 | Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller Affected: before 1.9.0 |
| CVE-2025-53477 | 7.5 | Jan 10 | Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layer Affected: before 1.9.0 |
| CVE-2024-51569 | 7.5 | Nov 26 | Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler Affected: before 1.8.0 |
| CVE-2024-24746 | 7.5 | Apr 6 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE. Specially crafted GATT operation can cause infinite loop in GATT server leading to denial… Affected: before 1.7.0 |
| CVE-2026-45812 | 6.5 | Jul 24 | Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report Handler Affected: before 1.10.0 |
| CVE-2024-47248 | 6.3 | Nov 26 | Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack Affected: before 1.8.0 |
| CVE-2026-46452 | 5.3 | Jul 24 | Apache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failure Affected: before 1.10.0 |
| CVE-2024-47250 | 5.0 | Nov 26 | Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access Affected: before 1.8.0 |
| CVE-2024-47249 | 5.0 | Nov 26 | Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler Affected: before 1.8.0 |
| CVE-2025-53470 | 3.1 | Jan 10 | Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver Affected: before 1.9.0 |
Showing 15
