NI
Product
Nimble
by Apache · last CVE Jul 24, 2026
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 5Low 1
Watch

Add Nimble to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45813
8.8
1%
Jul 24
Apache NimBLE: Incorrect data validation in BASS add/modify source operation
Affected: before 1.10.0
CVE-2025-62235
8.1
0%
Jan 10
Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing
Affected: before 1.9.0
CVE-2026-45816
7.5
1%
Jul 24
Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request
Affected: before 1.10.0
CVE-2026-45815
7.5
1%
Jul 24
Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler
Affected: before 1.10.0
CVE-2026-45811
7.5
0%
Jul 24
Apache NimBLE: Buffer overflow in socket HCI transport
Affected: before 1.10.0
CVE-2025-52435
7.5
0%
Jan 10
Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller
Affected: before 1.9.0
CVE-2025-53477
7.5
1%
Jan 10
Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layer
Affected: before 1.9.0
CVE-2024-51569
7.5
1%
Nov 26
Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler
Affected: before 1.8.0
CVE-2024-24746
7.5
1%
Apr 6
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE.  Specially crafted GATT operation can cause infinite loop in GATT server leading to denial…
Affected: before 1.7.0
CVE-2026-45812
6.5
1%
Jul 24
Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report Handler
Affected: before 1.10.0
CVE-2024-47248
6.3
1%
Nov 26
Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack
Affected: before 1.8.0
CVE-2026-46452
5.3
1%
Jul 24
Apache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failure
Affected: before 1.10.0
CVE-2024-47250
5.0
1%
Nov 26
Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access
Affected: before 1.8.0
CVE-2024-47249
5.0
1%
Nov 26
Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler
Affected: before 1.8.0
CVE-2025-53470
3.1
0%
Jan 10
Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver
Affected: before 1.9.0
Showing 15