PT-2026-64284 · Apache · Apache Nimble

CVE-2026-46452 · Publicado 2026-07-24 · Atualizado 2026-07-24

NVD

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken data toward application resulting in memory pressure and unstable parsing behavior.

This issue affects Apache NimBLE: through 1.9.0.

Users are recommended to upgrade to version 1.10.0, which fixes the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2026-46452

Produtos afetados

Apache Nimble

Referências · 4

• https://github.com/apache/mynewt-nimble/commit/593f95227a4073efde840a9bb34614929dfa7ed1 · Correção
• https://lists.apache.org/thread/ym80ogxj3398khvxxogxroz4gvgw3ssg · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-46452 · Nota de Segurança
• http://openwall.com/lists/oss-security/2026/07/24/16 · Nota