AN
Product
Apache NimBLE
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 5Low 0
Watch
Add Apache NimBLE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45813 | 8.8 | Jul 24 | Apache NimBLE: Incorrect data validation in BASS add/modify source operation Affected: through 1.9.0 |
| CVE-2026-45816 | 7.5 | Jul 24 | Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request Affected: through 1.9.0 |
| CVE-2026-45815 | 7.5 | Jul 24 | Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler Affected: through 1.9.0 |
| CVE-2026-45811 | 7.5 | Jul 24 | Apache NimBLE: Buffer overflow in socket HCI transport Affected: through 1.9.0 |
| CVE-2024-51569 | 7.5 | Nov 26 | Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler Affected: through 1.7.0 |
| CVE-2024-24746 | 7.5 | Apr 6 | Apache NimBLE: Denial of service in NimBLE Bluetooth stack Affected: through 1.6.0 |
| CVE-2026-45812 | 6.5 | Jul 24 | Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report Handler Affected: through 1.9.0 |
| CVE-2024-47248 | 6.3 | Nov 26 | Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack Affected: through 1.7.0 |
| CVE-2026-46452 | 5.3 | Jul 24 | Apache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failure Affected: through 1.9.0 |
| CVE-2024-47250 | 5.0 | Nov 26 | Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access Affected: through 1.7.0 |
| CVE-2024-47249 | 5.0 | Nov 26 | Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler Affected: through 1.7.0 |
Showing 11