CVE-2026-45816

CVE-2026-45816 is a NULL pointer dereference vulnerability in Apache NimBLE during the LE Long Term Key (LTK) request event. The issue occurs through NimBLE versions up to 1.9.0 and relies on disabled asserts with a bogus/misbehaving controller, leading to a crash. Impact is described as availabi...

PT-2023-17987 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the btu ble proc ltk req function of btu hcif.cc due to a missing bounds check. This could lead to local information disclosure, requiring Syste...