Advisories · Technology
Apache Software Foundation Apache NimBLE.
Every CVE that names Apache Software Foundation Apache NimBLE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Apache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failure
- Apache Software Foundation Apache NimBLE
- CWE-20
- CVSS 7.5 High
Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request
- Apache Software Foundation Apache NimBLE
- Memory corruption
- CVSS 7.5 High
Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler
- Apache Software Foundation Apache NimBLE
- Denial of service
- CVSS 8.8 High
Apache NimBLE: Incorrect data validation in BASS add/modify source operation
- Apache Software Foundation Apache NimBLE
- Memory corruption
- CVSS 6.5 Medium
Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report Handler
- Apache Software Foundation Apache NimBLE
- Memory corruption
- CVSS 7.5 High
Apache NimBLE: Buffer overflow in socket HCI transport
- Apache Software Foundation Apache NimBLE
- Memory corruption
- CVSS 7.5 High
Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler
- Apache Software Foundation Apache NimBLE
- Memory corruption
- CVSS 5.0 Medium
Apache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound access
- Apache Software Foundation Apache NimBLE
- Memory corruption
- CVSS 5.0 Medium
Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler
- Apache Software Foundation Apache NimBLE
- CWE-129
- CVSS 6.3 Medium
Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack
- Apache Software Foundation Apache NimBLE
- Memory corruption
- CVSS 7.5 High
Apache NimBLE: Denial of service in NimBLE Bluetooth stack
- Apache Software Foundation Apache NimBLE
- Denial of service