Threats Tagged 'cve-2026-45812'

Apache NimBLE versions prior to 1.10.0 have a buffer size miscalculation vulnerability when processing Legacy Advertising Report HCI events that include multiple reports. This flaw causes the host to read beyond the buffer boundary, resulting in corrupted GAP events delivered to the application. The vulnerability is considered low severity in typical use because NimBLE's own controller does not batch multiple reports, so the issue only arises when used with third-party controllers that do. The vulnerability is fixed in version 1.10.0.

Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event. When a single HCI advertising report event bundles multiple reports, NimBLE miscalculated the offset to the next report. This can cause the host to read past the end of the buffer and deliver a GAP event with bogus data to the application. Severity is low: NimBLE's own controller never batches multiple reports into one event, so this only matters when NimBLE's host is paired with a third-party controller that does. This issue affects Apache NimBLE: through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue.