CVE-2025-52435

概要

参考情報

• apache/mynewt-nimble commit 164f1c2 · Patch
• apache/mynewt-nimble commit ec3d75e · Patch
• lists.apache.org/thread/ow8dzpsqfh9llfclh5fzh6z237brzc0s · Mailing List
• openwall.com/lists/oss-security/2026/01/08/1 · Mailing List

nimble のその他の脆弱性

• CVE-2026-46452中 5.3Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken data toward application…
• CVE-2026-45816高 7.5NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asserts (otherwise assert…
• CVE-2026-45815高 7.5Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) m…
• CVE-2026-45813高 8.8Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service. Improper validation when parsing BA…
• CVE-2026-45812中 6.5Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event. When a single HCI …