CVEFinder.io

CVE-2026-45813

⚠️ high
🔍 Scan for this CVE
Summary

Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service. Improper validation when parsing BASS service  "Add Source" and "Modify Source" operation PDU could results in stack buffer overflow or arbitrary out-of-bound read. This can be triggered by nearby devices over Bluetooth connection, however pairing is required prior to accessing BASS service, which depending on device configuration may or may not require user action. This issue affects Apac

Description

Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service.
Improper validation when parsing BASS service  "Add Source" and "Modify Source" operation PDU could results in stack buffer overflow or arbitrary out-of-bound read.


This can be triggered by nearby devices over Bluetooth connection, however pairing is required prior to accessing BASS service, which depending on device configuration may or may not require user action.

This issue affects Apache NimBLE: through 1.9.0.

Users are recommended to upgrade to version 1.10.0, which fixes the issue.

CVSS Score
8.8
High
EPSS Score
0.4
Exploit Probability
Published Date
2026-07-24
First Seen: 2026-07-31
📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 81.0% of all 340,405 vulnerabilities in our database.

#64,719
Top 25% most severe
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jul 24, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
🏆 Discovered By
VulnCheck (reporter) 侯朋朋 <pengpeng@iscas.ac.cn> (reporter)
SSVC data provided by CISA
Last Modified 2026-07-27
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)

📦 Affected Products 1

🔗 References 3

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-45811 ⚠️ high 7.5 0.3 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. The HCI socket tr... 2026-07-24
CVE-2026-45812 🔶 medium 6.5 0.4 Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event... 2026-07-24
CVE-2026-45815 ⚠️ high 7.5 0.6 Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response (BLE_ATT_OP... 2026-07-24
CVE-2026-45816 ⚠️ high 7.5 0.6 NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asse... 2026-07-24
CVE-2026-46452 🔶 medium 5.3 0.6 Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken dat... 2026-07-24
CVE-2025-52435 ⚠️ high 7.5 0.0 J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improper handling of Pause ... 2026-01-10
These CVEs affect the same products