CVE-2025-53477

概要

参考情報

• apache/mynewt-nimble commit 0caf9ba · Patch
• apache/mynewt-nimble commit 3160b8c · Patch
• lists.apache.org/thread/1dxthc132hwm2tzvjblrtnschcsbw2vo · Mailing List
• openwall.com/lists/oss-security/2026/01/08/3 · Mailing List

nimble のその他の脆弱性

• CVE-2026-46452中 5.3Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken data toward application…
• CVE-2026-45816高 7.5NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asserts (otherwise assert…
• CVE-2026-45815高 7.5Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) m…
• CVE-2026-45813高 8.8Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service. Improper validation when parsing BA…
• CVE-2026-45812中 6.5Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event. When a single HCI …