Vulnerability Details CVE-2026-45811
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE.
The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. Severity is low: exploitation requires either a misconfigured pool size or a malicious/compromised controller on the other end of the HCI socket link, not over-the-air Bluetooth access.
This issue affects Apache NimBLE: through 1.9.0.
Users are recommended to upgrade to version 1.10.0, which fixes the issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 16.7%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2026-45811
-
cpe:2.3:a:apache:nimble:1.0.0
-
cpe:2.3:a:apache:nimble:1.1.0
-
cpe:2.3:a:apache:nimble:1.2.0
-
cpe:2.3:a:apache:nimble:1.3.0
-
cpe:2.3:a:apache:nimble:1.4.0
-
cpe:2.3:a:apache:nimble:1.5.0
-
cpe:2.3:a:apache:nimble:1.6.0
-
cpe:2.3:a:apache:nimble:1.7.0
-
cpe:2.3:a:apache:nimble:1.8.0
-
cpe:2.3:a:apache:nimble:1.9.0