What’s Vulnerable › Products
Apache Software Foundation Apache NimBLE vulnerabilities
15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.
Check whether your Apache Software Foundation Apache NimBLE version is affected
Latest Apache Software Foundation Apache NimBLE vulnerabilities
- CVE-2026-46452 — Apache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failure (CVSS 5.3)
- CVE-2026-45816 — Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request (CVSS 7.5)
- CVE-2026-45815 — Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler (CVSS 7.5)
- CVE-2026-45813 — Apache NimBLE: Incorrect data validation in BASS add/modify source operation (CVSS 8.8)
- CVE-2026-45812 — Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report Handler (CVSS 6.5)
- CVE-2026-45811 — Apache NimBLE: Buffer overflow in socket HCI transport (CVSS 7.5)
- CVE-2025-62235 — Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing (CVSS 8.1)
- CVE-2025-53477 — Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layer (CVSS 7.5)
- CVE-2025-53470 — Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver (CVSS 3.1)
- CVE-2025-52435 — Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller (CVSS 7.5)
- CVE-2024-51569 — Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler (CVSS 7.5)
- CVE-2024-47250 — Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access (CVSS 5.0)
- CVE-2024-47249 — Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler (CVSS 5.0)
- CVE-2024-47248 — Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack (CVSS 6.3)
- CVE-2024-24746 — Apache NimBLE: Denial of service in NimBLE Bluetooth stack (CVSS 7.5)