Known vulnerabilities in Apache NimBLE
Vendor:
Apache Foundation
Software:
Apache NimBLE
Software CPE:
cpe:2.3:a:apache_foundation:apache_nimble:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
15
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.7
Breakdown by Severity Chart
Vulnerabilities (15)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144753 - Improper input validation CVE-2026-46452 |
CWE-20 | Medium | 1.10.0 | 24.08.2026 |
SB20260824135 |
||
| #VU144752 - NULL Pointer Dereference CVE-2026-45816 |
CWE-476 | Low | 1.10.0 | 24.08.2026 |
SB20260824135 |
||
| #VU144751 - Reachable Assertion CVE-2026-45815 |
CWE-617 | Medium | 1.10.0 | 24.08.2026 |
SB20260824135 |
||
| #VU144750 - Out-of-bounds write CVE-2026-45813 |
CWE-787 | Low | 1.10.0 | 24.08.2026 |
SB20260824135 |
||
| #VU144748 - Incorrect Calculation of Buffer Size CVE-2026-45812 |
CWE-131 | Low | 1.10.0 | 24.08.2026 |
SB20260824135 |
||
| #VU144747 - Buffer overflow CVE-2026-45811 |
CWE-120 | Low | 1.10.0 | 24.08.2026 |
SB20260824135 |
||
| #VU121106 - Out-of-bounds read CVE-2025-53470 |
CWE-125 | Low | 1.9.0 | 08.01.2026 |
SB2026010844 |
||
| #VU121105 - NULL Pointer Dereference CVE-2025-53477 |
CWE-476 | Low | 1.9.0 | 08.01.2026 |
SB2026010844 |
||
| #VU121104 - Authentication Bypass by Spoofing CVE-2025-62235 |
CWE-290 | Medium | 1.9.0 | 08.01.2026 |
SB2026010844 |
||
| #VU121103 - Cleartext Transmission of Sensitive Information CVE-2025-52435 |
CWE-319 | Medium | 1.9.0 | 08.01.2026 |
SB2026010844 |
||
| #VU100971 - Out-of-bounds read CVE-2024-51569 |
CWE-125 | Low | 1.8.0 | 27.11.2024 |
SB2024112705 |
||
| #VU100970 - Out-of-bounds read CVE-2024-47250 |
CWE-125 | Low | 1.8.0 | 27.11.2024 |
SB2024112705 |
||
| #VU100950 - Improper input validation CVE-2024-47249 |
CWE-20 | Low | 1.8.0 | 26.11.2024 |
SB2024112705 |
||
| #VU100949 - Memory corruption CVE-2024-47248 |
CWE-119 | High | 1.8.0 | 26.11.2024 |
SB2024112705 |
||
| #VU88227 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-24746 |
CWE-835 | Medium | 1.7.0 | 09.04.2024 |
SB2024040940 SB2024072946 |