Apache Software Foundation Apache NimBLE

• CVE-2026-46452 Medium 5.3 Apache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failure 0.9%
• CVE-2026-45816 High 7.5 Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request 1.0%
• CVE-2026-45815 High 7.5 Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler 1.0%
• CVE-2026-45813 High 8.8 Apache NimBLE: Incorrect data validation in BASS add/modify source operation 0.5%
• CVE-2026-45812 Medium 6.5 Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report Handler 0.7%
• CVE-2026-45811 High 7.5 Apache NimBLE: Buffer overflow in socket HCI transport 0.5%
• CVE-2024-51569 High 7.5 Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler 1.2%
• CVE-2024-47250 Medium 5.0 Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access 0.7%
• CVE-2024-47249 Medium 5.0 Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler 0.6%
• CVE-2024-47248 Medium 6.3 Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack 0.7%
• CVE-2024-24746 High 7.5 Apache NimBLE: Denial of service in NimBLE Bluetooth stack 1.4%