Not rated

CVE-2025-53470 Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver

Description

Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could lead to invalid memory read in H4 driver. This issue affects Apache NimBLE: through 1.8. This issue requires a broken or bogus Bluetooth controller and thus severity is considered low. Users are recommended to upgrade to version 1.9, which fixes the issue.

Affected products and versions

Product	Affected versions	Fixed in
Apache Mynewt NimBLE 1.8	earliest → 1.8	No fix stated

References

github.com github.com
lists.apache.org lists.apache.org

Timeline

Published January 10, 2026
Last modified January 12, 2026

The 4 CVEs of Apache Mynewt NimBLE →

CVE-2025-52435 J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE Not rated CVE-2025-53477 NULL Pointer Dereference vulnerability in Apache Nimble Not rated CVE-2025-62235 Authentication Bypass by Spoofing vulnerability in Apache NimBLE Not rated

Track this CVE

CVE-2025-53470 Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver

Description

Affected products and versions

References

Timeline

Other CVEs of Apache Mynewt NimBLE