Apache Mynewt Nimble
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_mynewt_nimble:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Mynewt Nimble (4949f2d2-816a-509b-9810-7239b3bf56dc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-62235 |
vulnerable | 2026-06-08 07:37:28.931193 |
Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing
Authentication Bypass by Spoofing vulnerability in Apache NimBLE.
Receiving specially crafted Security Request could lead to removal of original bond and re-bond with impostor.
This issue affects Apache NimBLE: through 1.8.0.
Users are recommended to upgrade to version 1.9.0, which fixes the issue.
Published: 2026-01-10T09:42:30.446Z
Updated: 2026-01-12T16:45:27.886Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53477 |
vulnerable | 2026-06-08 07:31:14.593040 |
Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layer
NULL Pointer Dereference vulnerability in Apache Nimble.
Missing validation of HCI connection complete or HCI command TX buffer could lead to NULL pointer dereference.
This issue requires disabled asserts and broken or bogus Bluetooth controller and thus severity is considered low.
This issue affects Apache NimBLE: through 1.8.0.
Users are recommended to upgrade to version 1.9.0, which fixes the issue.
Published: 2026-01-10T09:45:27.630Z
Updated: 2026-01-12T16:54:48.496Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53470 |
vulnerable | 2026-06-08 07:31:14.582465 |
Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver
Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could lead to invalid memory read in H4 driver.
This issue affects Apache NimBLE: through 1.8.
This issue requires a broken or bogus Bluetooth controller and thus severity is considered low.
Users are recommended to upgrade to version 1.9, which fixes the issue.
Published: 2026-01-10T09:46:35.789Z
Updated: 2026-01-12T19:12:52.715Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52435 |
vulnerable | 2026-06-08 07:31:11.580085 |
Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller
J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE.
Improper handling of Pause Encryption procedure on Link Layer results in a previously encrypted connection being left in un-encrypted state allowing an eavesdropper to observe the remainder of the exchange.
This issue affects Apache NimBLE: through <= 1.8.0.
Users are recommended to upgrade to version 1.9.0, which fixes the issue.
Published: 2026-01-10T09:47:10.568Z
Updated: 2026-01-12T19:07:07.593Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.