CVE-2026-45816

⚠️ high

Summary

NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asserts (otherwise assert would trigger before NULL dereference) and bogus (or misbehaving) controller, thus severity is low. This issue affects Apache NimBLE: through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue.

CVSS Score

7.5

High

EPSS Score

0.6

Exploit Probability

Published Date

2026-07-24

First Seen: 2026-07-31

📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 68.5% of all 340,405 vulnerabilities in our database.

#107,108

Above average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: Jul 24, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

YES

Can be exploited automatically

💥 Technical Impact

Partial

Limited system impact

🏆 Discovered By

Chongqing Lei <leicq@seu.edu.cn> (reporter)

SSVC data provided by CISA

Last Modified 2026-07-27

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE IDs (Weakness Types)

CWE-476

📦 Affected Products 1

Vendor	Product	Status	Affected Versions
apache	nimble	Affected	< 1.10.0

🔗 References 3

https://github.com/apache/mynewt-nimble/commit/9448c...

Patch

https://lists.apache.org/thread/psppdk5j8jnq1m4jn96t...

Mailing List Vendor Advisory

http://www.openwall.com/lists/oss-security/2026/07/2...

Mailing List Third Party Advisory

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-45811	⚠️ high	7.5	0.3	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. The HCI socket tr...	2026-07-24
CVE-2026-45812	🔶 medium	6.5	0.4	Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event...	2026-07-24
CVE-2026-45813	⚠️ high	8.8	0.4	Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service. Improper valida...	2026-07-24
CVE-2026-45815	⚠️ high	7.5	0.6	Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response (BLE_ATT_OP...	2026-07-24
CVE-2026-46452	🔶 medium	5.3	0.6	Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken dat...	2026-07-24
CVE-2025-52435	⚠️ high	7.5	0.0	J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improper handling of Pause ...	2026-01-10

These CVEs affect the same products