Apache Mynewt Nimble (Apache Software Foundation) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-01-10. Vendor: Apache Software Foundation.

CVEs of Apache Mynewt Nimble

• CVE-2025-53477 - CVSS 7.5 (high), 2026-01-10: NULL Pointer Dereference vulnerability in Apache Nimble. Missing validation of HCI connection complete or HCI command TX buffer could lead to NULL pointer…
• CVE-2025-53470 - CVSS 3.1 (low), 2026-01-10: Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could lead to invalid memory read in H4 driver. This issue…
• CVE-2025-52435 - CVSS 7.5 (high), 2026-01-10: J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improper handling of Pause Encryption procedure on Link Layer…
• CVE-2025-62235 - CVSS 8.1 (high), 2026-01-10: Authentication Bypass by Spoofing vulnerability in Apache NimBLE. Receiving specially crafted Security Request could lead to removal of original bond and…