CVE-2026-45816

A NULL Pointer Dereference vulnerability exists in Apache NimBLE during the LE Long Term Key Request event. This flaw is triggered by a bogus or misbehaving controller and specifically requires disabled asserts to occur, as an active assert would normally trigger before the dereference. The issue...

PT-2023-17987 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the btu ble proc ltk req function of btu hcif.cc due to a missing bounds check. This could lead to local information disclosure, requiring Syste...