Apache Nimble (Apache Software Foundation) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-07-24. Vendor: Apache Software Foundation.
CVEs of Apache Nimble
- CVE-2026-46452 - CVSS 5.3 (medium), 2026-07-24: Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken data toward application resulting in…
- CVE-2026-45816 - CVSS 7.5 (high), 2026-07-24: NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asserts (otherwise assert would trigger…
- CVE-2026-45815 - CVSS 7.5 (high), 2026-07-24: Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) may trigger assert…
- CVE-2026-45813 - CVSS 8.8 (high), 2026-07-24: Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service. Improper validation when parsing BASS service "Add…
- CVE-2026-45812 - CVSS 6.5 (medium), 2026-07-24: Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event. When a single HCI advertising report…
- CVE-2026-45811 - CVSS 7.5 (high), 2026-07-24: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. The HCI socket transport did not check whether a…
- CVE-2024-51569 - CVSS 7.5 (high), 2024-11-26: Out-of-bounds Read vulnerability in Apache NimBLE. Missing proper validation of HCI Number Of Completed Packets could lead to out-of-bound access when parsing…
- CVE-2024-47250 - CVSS 5 (medium), 2024-11-26: Out-of-bounds Read vulnerability in Apache NimBLE. Missing proper validation of HCI advertising report could lead to out-of-bound access when parsing HCI…
- CVE-2024-47249 - CVSS 5 (medium), 2024-11-26: Improper Validation of Array Index vulnerability in Apache NimBLE. Lack of input validation for HCI events from controller could result in out-of-bound memory…
- CVE-2024-47248 - CVSS 6.3 (medium), 2024-11-26: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. Specially crafted MESH message could result in memory…
- CVE-2024-24746 - CVSS 7.5 (high), 2024-04-06: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE. Specially crafted GATT operation can cause infinite loop in GATT…
