Non notée

CVE-2025-53470 Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver

Description

Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could lead to invalid memory read in H4 driver. This issue affects Apache NimBLE: through 1.8. This issue requires a broken or bogus Bluetooth controller and thus severity is considered low. Users are recommended to upgrade to version 1.9, which fixes the issue.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Apache Mynewt NimBLE 1.8	premières → 1.8	Pas de correctif indiqué

Références

github.com github.com
lists.apache.org lists.apache.org

Chronologie

Publiée 10 janvier 2026
Dernière modification 12 janvier 2026

Les 4 CVE de Apache Mynewt NimBLE →

CVE-2025-52435 J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE Non notée CVE-2025-53477 NULL Pointer Dereference vulnerability in Apache Nimble Non notée CVE-2025-62235 Authentication Bypass by Spoofing vulnerability in Apache NimBLE Non notée

Suivre cette CVE

CVE-2025-53470 Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver

Description

Produits et versions touchés

Références

Chronologie

Autres CVE de Apache Mynewt NimBLE