PT-2026-48338 · Simpleble · Simpleble

Published 2026-06-09 · Updated 2026-06-10 · CVE-2026-44634

Mitre

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SimpleBLE is a cross-platform library and bindings for Bluetooth Low Energy (BLE). Prior to version 0.14.0, there are multiple stack-based buffer overflow vulnerabilities in SimpleBLE. There is a stack overflow vulnerability in the dongl backend’s Protocol::simpleble write function (local, caller-controlled input). A stack overflow vulnerability when processing manufacturer-specific data in BLE advertisements (remote, no pairing or connection required). Lastly, a stack overflow vulnerability when processing service data in BLE advertisements (remote, no pairing or connection required). This issue has been patched in version 0.14.0.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2026-44634

Affected Products

Simpleble

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-44634 · Security Note
• https://github.com/simpleble/simpleble/releases/tag/v0.14.0 · Note
• https://github.com/simpleble/simpleble/pull/466 · Note
• https://github.com/simpleble/simpleble/security/advisories/GHSA-8h89-q8m2-c8fp · Note
• https://github.com/simpleble/simpleble/commit/1501d59d76a4280268372afb1b157bf6caeacba6 · Note