Apache Software Foundation Apache Mynewt NimBLE

• CVE-2025-52435 High 7.5 Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller 0.2%
• CVE-2025-53470 Low 3.1 Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver 0.3%
• CVE-2025-53477 High 7.5 Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layer 0.8%
• CVE-2025-62235 High 8.1 Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing 0.4%