TI-2024-16263 CVE-2024-24746 · GHSA-wpv3-6qr5-9rmx
Apache NimBLE: Denial of service in NimBLE Bluetooth stack
Priority MEDIUM 42
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE.
Apache
Records4054All Threatist records
Exploited (KEV)47In CISA KEV
CVSS critical776CVSS 9.0–10.0
CVSS high1543CVSS 7.0–8.9
Exploited now
Apache records in CISA KEVTI-2026-79288 Google Brotli Unchecked Return Value Vulnerability TI-2016-02580 Apache Struts Command Injection Vulnerability TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability TI-2026-26494 Apache ActiveMQ Improper Input Validation Vulnerability TI-2024-25716 Apache HTTP Server Improper Escaping of Output Vulnerability TI-2025-18529 Apache Tomcat Path Equivalence Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
15 records in Nimble · all components
TI-2026-33550 CVE-2026-45816 · GHSA-r25p-7q83-xfq4
Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request
Priority MEDIUM 41
NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event.
TI-2026-33549 CVE-2026-45815 · GHSA-v377-9cxj-ww4r
Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler
Priority MEDIUM 41
Reachable Assertion vulnerability in Apache NimBLE.
TI-2026-33548 CVE-2026-45813 · GHSA-2vqf-9746-8h23
Apache NimBLE: Incorrect data validation in BASS add/modify source operation
Priority MEDIUM 41
Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service.
TI-2024-34484 CVE-2024-51569 · GHSA-966f-2c6j-qj89
Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler
Priority MEDIUM 41
Out-of-bounds Read vulnerability in Apache NimBLE.
TI-2025-33422 CVE-2025-53477 · GHSA-6phw-p8vc-q8gp
Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layer
Priority MEDIUM 40
NULL Pointer Dereference vulnerability in Apache Nimble.
TI-2025-32572 CVE-2025-52435 · GHSA-5c5p-g26h-xx2f
Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller
Priority LOW 38
J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE.
TI-2026-33546 CVE-2026-45811 · GHSA-mc27-476h-fwpg
Apache NimBLE: Buffer overflow in socket HCI transport
Priority LOW 35
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE.
TI-2025-38544 CVE-2025-62235 · GHSA-8mfp-xmv3-hv35
Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing
Priority LOW 35
Authentication Bypass by Spoofing vulnerability in Apache NimBLE.
TI-2026-34155 CVE-2026-46452 · GHSA-wfj4-rqg3-9346
Apache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failure
Priority LOW 32
Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken data toward application resulting in memory pressure and unstable parsing behavior.
TI-2026-33547 CVE-2026-45812 · GHSA-m9xh-wpcw-qvx9
Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report Handler
Priority LOW 30
Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event.
TI-2024-31584 CVE-2024-47248 · GHSA-f94q-ffqr-x638
Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack
Priority LOW 29
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE.
TI-2024-31586 CVE-2024-47250 · GHSA-4qc3-fmcj-w66w
Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access
Priority LOW 24
Out-of-bounds Read vulnerability in Apache NimBLE.
TI-2024-31585 CVE-2024-47249 · GHSA-fw6g-5qw9-p3mx
Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler
Priority LOW 24
Improper Validation of Array Index vulnerability in Apache NimBLE.
TI-2025-33415 CVE-2025-53470 · GHSA-p54q-9gfq-fvp4
Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver
Priority LOW 15
Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver.