PT-2026-64283 · Apache · Apache Nimble

CVE-2026-45816 · Publicado 2026-07-24 · Atualizado 2026-07-24

NVD

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event.

This requires disabled asserts (otherwise assert would trigger before NULL dereference) and bogus (or misbehaving) controller, thus severity is low.

This issue affects Apache NimBLE: through 1.9.0.

Users are recommended to upgrade to version 1.10.0, which fixes the issue.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2026-45816

Produtos afetados

Apache Nimble

Referências · 4

• https://github.com/apache/mynewt-nimble/commit/9448c5f495eb55018121b24a9dab5305c9222ea1 · Correção
• https://lists.apache.org/thread/psppdk5j8jnq1m4jn96tnfofspgqvzvn · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2026/07/24/15 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-45816 · Nota de Segurança