NI
Product
Nimble
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 5Low 1
Watch
Add Nimble to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45813 | 8.8 | Jul 24 | Apache NimBLE: Incorrect data validation in BASS add/modify source operation Affected: before 1.10.0 |
| CVE-2025-62235 | 8.1 | Jan 10 | Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing Affected: before 1.9.0 |
| CVE-2026-45816 | 7.5 | Jul 24 | Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request Affected: before 1.10.0 |
| CVE-2026-45815 | 7.5 | Jul 24 | Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler Affected: before 1.10.0 |
| CVE-2026-45811 | 7.5 | Jul 24 | Apache NimBLE: Buffer overflow in socket HCI transport Affected: before 1.10.0 |
| CVE-2025-52435 | 7.5 | Jan 10 | Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller Affected: before 1.9.0 |
| CVE-2025-53477 | 7.5 | Jan 10 | Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layer Affected: before 1.9.0 |
| CVE-2024-51569 | 7.5 | Nov 26 | Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler Affected: before 1.8.0 |
| CVE-2024-24746 | 7.5 | Apr 6 | Apache NimBLE: Denial of service in NimBLE Bluetooth stack Affected: before 1.7.0 |
Showing 9