Back to CVE List

CVE-2026-45816

Vulnerability Description

NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event.

This requires disabled asserts (otherwise assert would trigger before NULL dereference) and bogus (or misbehaving) controller, thus severity is low.

This issue affects Apache NimBLE: through 1.9.0.

Users are recommended to upgrade to version 1.10.0, which fixes the issue.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-476
Source
NVD
Vendor
Apache Software Foundation
Product
Apache NimBLE

External References

Discussion (0)

Add Comment

No comments yet. Be the first!