CVE-2026-46452

🔶 medium

Summary

Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken data toward application resulting in memory pressure and unstable parsing behavior. This issue affects Apache NimBLE: through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue.

CVSS Score

5.3

Medium

EPSS Score

0.6

Exploit Probability

Published Date

2026-07-24

First Seen: 2026-07-31

📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 19.4% of all 340,405 vulnerabilities in our database.

#274,198

Below average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: Jul 24, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

YES

Can be exploited automatically

💥 Technical Impact

Partial

Limited system impact

🏆 Discovered By

Yicheng Yang <orangeyyc.mail@gmail.com> (reporter)

SSVC data provided by CISA

Last Modified 2026-07-27

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE IDs (Weakness Types)

CWE-20

📦 Affected Products 1

Vendor	Product	Status	Affected Versions
apache	nimble	Affected	< 1.10.0

🔗 References 3

https://github.com/apache/mynewt-nimble/commit/593f9...

Patch

https://lists.apache.org/thread/ym80ogxj3398khvxxogx...

Mailing List Vendor Advisory Patch

http://www.openwall.com/lists/oss-security/2026/07/2...

Mailing List Third Party Advisory

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-45811	⚠️ high	7.5	0.3	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. The HCI socket tr...	2026-07-24
CVE-2026-45812	🔶 medium	6.5	0.4	Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event...	2026-07-24
CVE-2026-45813	⚠️ high	8.8	0.4	Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service. Improper valida...	2026-07-24
CVE-2026-45815	⚠️ high	7.5	0.6	Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response (BLE_ATT_OP...	2026-07-24
CVE-2026-45816	⚠️ high	7.5	0.6	NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asse...	2026-07-24
CVE-2025-52435	⚠️ high	7.5	0.0	J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improper handling of Pause ...	2026-01-10

These CVEs affect the same products