Priority LOW 32
Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken data toward application resulting in memory pressure and unstable parsing behavior.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00908 · Published 2026-07-24 · No fix listed CWE-20
Priority MEDIUM 41
NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0103 · Published 2026-07-24 · No fix listed CWE-476
Priority MEDIUM 41
Reachable Assertion vulnerability in Apache NimBLE.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0103 · Published 2026-07-24 · No fix listed CWE-617
Priority MEDIUM 41
Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00527 · Published 2026-07-24 · No fix listed CWE-191
Priority LOW 30
Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00694 · Published 2026-07-24 · No fix listed CWE-131
Priority LOW 35
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00482 · Published 2026-07-24 · No fix listed CWE-120
Priority LOW 38
J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-01-10 · No fix listed CWE-5
Priority LOW 15
Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver.
CVSS 3.1LOW 3.1· Adjacent network · No auth · No interaction · EPSS 0.00346 · Published 2026-01-10 · No fix listed CWE-125
Priority MEDIUM 40
NULL Pointer Dereference vulnerability in Apache Nimble.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00815 · Published 2026-01-10 · No fix listed CWE-476
Priority LOW 35
Authentication Bypass by Spoofing vulnerability in Apache NimBLE.
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.00375 · Published 2026-01-10 · No fix listed CWE-290
Priority MEDIUM 41
Out-of-bounds Read vulnerability in Apache NimBLE.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01239 · Published 2024-11-26 · No fix listed CWE-125
Priority LOW 24
Out-of-bounds Read vulnerability in Apache NimBLE.
CVSS 3.1MEDIUM 5.0· Adjacent network · No auth · No interaction · EPSS 0.00692 · Published 2024-11-26 · No fix listed CWE-125
Priority LOW 24
Improper Validation of Array Index vulnerability in Apache NimBLE.
CVSS 3.1MEDIUM 5.0· Adjacent network · No auth · No interaction · EPSS 0.00622 · Published 2024-11-26 · No fix listed CWE-129
Priority LOW 29
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE.
CVSS 3.1MEDIUM 6.3· Adjacent network · No auth · No interaction · EPSS 0.00721 · Published 2024-11-26 · No fix listed CWE-120
Priority MEDIUM 42
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01446 · Published 2024-04-06 · No fix listed CWE-835
THREATIST.IORead the docs