CVE-2026-45811

Apache NimBLE versions through 1.9.0 are vulnerable to a Classic Buffer Overflow in the HCI socket transport . The root cause is a failure to verify if a received HCI event fits within the configured event pool before copying it. Exploitation is difficult as it requires either a misconfigured poo...

CVE-2024-47248

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Apache NimBLE. Specially crafted MESH message could result in memory corruption when non-default build configuration is used. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to...