CVE-2026-45813

Apache NimBLE versions through 1.9.0 are vulnerable to an out-of-bounds write and integer underflow (wrap or wraparound) in the BASS service. The root cause is improper validation during the parsing of Protocol Data Units (PDU) for "Add Source" and "Modify Source" operations. This flaw can result...