CVE-2026-45811 Apache NimBLE: Buffer overflow in socket HCI transport

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Apache NimBLE. The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. Severity is low: exploitation requires either...

CVE-2026-45811

A Classic Buffer Overflow vulnerability exists in Apache NimBLE (versions through 1.9.0 ) within the HCI socket transport . The root cause is a failure to verify if a received HCI event fits into the configured event pool before copying it. The impact is a buffer overflow, though the severity is ...