Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Mynewt NimBLE

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-52435

    Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller

    J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improper handling of Pause Encryption procedure on Link Layer results in a previously encrypted connection being left in un-encrypted state allowing an eavesdropper to…

    Apache Software Foundation Apache Mynewt NimBLE
  • High 7.5
    CVE-2025-53477

    Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layer

    NULL Pointer Dereference vulnerability in Apache Nimble. Missing validation of HCI connection complete or HCI command TX buffer could lead to NULL pointer dereference. This issue requires disabled asserts and broken or bogus Bluetooth controller and thus seve…

    Apache Software Foundation Apache Mynewt NimBLE
  • High 8.1
    CVE-2025-62235

    Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing

    Authentication Bypass by Spoofing vulnerability in Apache NimBLE. Receiving specially crafted Security Request could lead to removal of original bond and re-bond with impostor. This issue affects Apache NimBLE: through 1.8.0. Users are recommended to upgrade …

    Apache Software Foundation Apache Mynewt NimBLE