CVE-2026-45815

⚠️ high

Summary

Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) may trigger assert in ATT parser. Severity is medium as this requires DUT to first send ATT Read Multiple Variable Request. This issue affects Apache NimBLE: through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue.

CVSS Score

7.5

High

EPSS Score

0.6

Exploit Probability

Published Date

2026-07-24

First Seen: 2026-07-31

📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 68.5% of all 340,405 vulnerabilities in our database.

#107,108

Above average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: Jul 24, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

YES

Can be exploited automatically

💥 Technical Impact

Partial

Limited system impact

🏆 Discovered By

Amemoyoi https://github.com/Amemoyoi (reporter)

SSVC data provided by CISA

Last Modified 2026-07-27

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE IDs (Weakness Types)

CWE-617

📦 Affected Products 1

Vendor	Product	Status	Affected Versions
apache	nimble	Affected	< 1.10.0

🔗 References 3

https://github.com/apache/mynewt-nimble/commit/fae6a...

Patch

https://lists.apache.org/thread/3d09hgo5zmm7dnryst3t...

Mailing List Vendor Advisory

http://www.openwall.com/lists/oss-security/2026/07/2...

Mailing List Third Party Advisory

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-45811	⚠️ high	7.5	0.3	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. The HCI socket tr...	2026-07-24
CVE-2026-45812	🔶 medium	6.5	0.4	Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event...	2026-07-24
CVE-2026-45813	⚠️ high	8.8	0.4	Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service. Improper valida...	2026-07-24
CVE-2026-45816	⚠️ high	7.5	0.6	NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asse...	2026-07-24
CVE-2026-46452	🔶 medium	5.3	0.6	Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken dat...	2026-07-24
CVE-2025-52435	⚠️ high	7.5	0.0	J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improper handling of Pause ...	2026-01-10

These CVEs affect the same products