This is an automated email from the ASF dual-hosted git repository. sjanc pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/mynewt-site.git
commit 1c178d7c7d219001d60323c351a0d2b2ee02880b Author: Szymon Janc <[email protected]> AuthorDate: Fri Jul 24 13:14:26 2026 +0200 Add new public CVEs --- docs/cve.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/cve.md b/docs/cve.md index ec80dcce9a..bcba329ada 100644 --- a/docs/cve.md +++ b/docs/cve.md @@ -5,6 +5,12 @@ in Apache Mynewt. | CVE-ID | Description | Releases Affected | Release Fixed | |-------------------------------------------------------------------------------|--------------------------------------|----------------------|---------------| +| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45811";>CVE-2026-45811 </a> | Buffer overflow in socket HCI transport | NimBLE through 1.9.0 | NimBLE 1.10.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45812";>CVE-2026-45812 </a> | OOB Read via sizeof(pointer) in Legacy Advertising Report Handler | NimBLE through 1.9.0 | NimBLE 1.10.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45813";>CVE-2026-45813 </a> | Incorrect data validation in BASS add/modify source operation READY | NimBLE through 1.9.0 | NimBLE 1.10.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45815";>CVE-2026-45815 </a> | Remote reachable assertion in ATT Read Multiple Variable Response handler | NimBLE through 1.9.0 | NimBLE 1.10.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45816";>CVE-2026-45816 </a> | NULL pointer dereference vulnerability in SMP LTK request | NimBLE through 1.9.0 | NimBLE 1.10.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2026-46452";>CVE-2026-46452 </a> | Mesh Proxy SAR reassembly unbounded append and unchecked failure | NimBLE through 1.9.0 | NimBLE 1.10.0 | | <a href="https://www.cve.org/CVERecord?id=CVE-2025-52435";>CVE-2025-52435 </a> | Invalid error handling in pause encryption procedure in NimBLE controller | NimBLE through 1.8.0 | NimBLE 1.9.0 | | <a href="https://www.cve.org/CVERecord?id=CVE-2025-53470";>CVE-2025-53470 </a> | Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver | NimBLE through 1.8.0 | NimBLE 1.9.0 | | <a href="https://www.cve.org/CVERecord?id=CVE-2025-53477";>CVE-2025-53477 </a> | NULL Pointer Dereference in NimBLE host HCI layer | NimBLE through 1.8.0 | NimBLE 1.9.0 |
