This is an automated email from the ASF dual-hosted git repository. sjanc pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/mynewt-site.git
commit f28bcf3c80cab5e612fb5599c5a6f42e8fbb20be Author: Szymon Janc <[email protected]> AuthorDate: Fri Jul 24 13:15:42 2026 +0200 Sort CVEs --- docs/cve.md | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/docs/cve.md b/docs/cve.md index bcba329ada..aee5035878 100644 --- a/docs/cve.md +++ b/docs/cve.md @@ -5,18 +5,18 @@ in Apache Mynewt. | CVE-ID | Description | Releases Affected | Release Fixed | |-------------------------------------------------------------------------------|--------------------------------------|----------------------|---------------| -| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45811";>CVE-2026-45811 </a> | Buffer overflow in socket HCI transport | NimBLE through 1.9.0 | NimBLE 1.10.0 | -| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45812";>CVE-2026-45812 </a> | OOB Read via sizeof(pointer) in Legacy Advertising Report Handler | NimBLE through 1.9.0 | NimBLE 1.10.0 | -| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45813";>CVE-2026-45813 </a> | Incorrect data validation in BASS add/modify source operation READY | NimBLE through 1.9.0 | NimBLE 1.10.0 | -| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45815";>CVE-2026-45815 </a> | Remote reachable assertion in ATT Read Multiple Variable Response handler | NimBLE through 1.9.0 | NimBLE 1.10.0 | -| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45816";>CVE-2026-45816 </a> | NULL pointer dereference vulnerability in SMP LTK request | NimBLE through 1.9.0 | NimBLE 1.10.0 | | <a href="https://www.cve.org/CVERecord?id=CVE-2026-46452";>CVE-2026-46452 </a> | Mesh Proxy SAR reassembly unbounded append and unchecked failure | NimBLE through 1.9.0 | NimBLE 1.10.0 | -| <a href="https://www.cve.org/CVERecord?id=CVE-2025-52435";>CVE-2025-52435 </a> | Invalid error handling in pause encryption procedure in NimBLE controller | NimBLE through 1.8.0 | NimBLE 1.9.0 | -| <a href="https://www.cve.org/CVERecord?id=CVE-2025-53470";>CVE-2025-53470 </a> | Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver | NimBLE through 1.8.0 | NimBLE 1.9.0 | -| <a href="https://www.cve.org/CVERecord?id=CVE-2025-53477";>CVE-2025-53477 </a> | NULL Pointer Dereference in NimBLE host HCI layer | NimBLE through 1.8.0 | NimBLE 1.9.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45816";>CVE-2026-45816 </a> | NULL pointer dereference vulnerability in SMP LTK request | NimBLE through 1.9.0 | NimBLE 1.10.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45815";>CVE-2026-45815 </a> | Remote reachable assertion in ATT Read Multiple Variable Response handler | NimBLE through 1.9.0 | NimBLE 1.10.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45813";>CVE-2026-45813 </a> | Incorrect data validation in BASS add/modify source operation READY | NimBLE through 1.9.0 | NimBLE 1.10.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45812";>CVE-2026-45812 </a> | OOB Read via sizeof(pointer) in Legacy Advertising Report Handler | NimBLE through 1.9.0 | NimBLE 1.10.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2026-45811";>CVE-2026-45811 </a> | Buffer overflow in socket HCI transport | NimBLE through 1.9.0 | NimBLE 1.10.0 | | <a href="https://www.cve.org/CVERecord?id=CVE-2025-62235";>CVE-2025-62235 </a> | Incorrect handling of SMP Security Request could lead to undesirable pairing | NimBLE through 1.8.0 | NimBLE 1.9.0 | -| <a href="https://www.cve.org/CVERecord?id=CVE-2024-47248";>CVE-2024-47248 </a> | Buffer overflow in NimBLE MESH Bluetooth stack | NimBLE through 1.7.0 | NimBLE 1.8.0 | -| <a href="https://www.cve.org/CVERecord?id=CVE-2024-47249";>CVE-2024-47249 </a> | Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler | NimBLE through 1.7.0 | NimBLE 1.8.0 | -| <a href="https://www.cve.org/CVERecord?id=CVE-2024-47250";>CVE-2024-47250 </a> | Lack of input validation in HCI advertising report could lead to potential out-of-bound access | NimBLE through 1.7.0 | NimBLE 1.8.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2025-53477";>CVE-2025-53477 </a> | NULL Pointer Dereference in NimBLE host HCI layer | NimBLE through 1.8.0 | NimBLE 1.9.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2025-53470";>CVE-2025-53470 </a> | Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver | NimBLE through 1.8.0 | NimBLE 1.9.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2025-52435";>CVE-2025-52435 </a> | Invalid error handling in pause encryption procedure in NimBLE controller | NimBLE through 1.8.0 | NimBLE 1.9.0 | | <a href="https://www.cve.org/CVERecord?id=CVE-2024-51569";>CVE-2024-51569 </a> | Lack of input sanitization leading to out-of-bound reads in Number of Completed Packets HCI event handler | NimBLE through 1.7.0 | NimBLE 1.8.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2024-47250";>CVE-2024-47250 </a> | Lack of input validation in HCI advertising report could lead to potential out-of-bound access | NimBLE through 1.7.0 | NimBLE 1.8.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2024-47249";>CVE-2024-47249 </a> | Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler | NimBLE through 1.7.0 | NimBLE 1.8.0 | +| <a href="https://www.cve.org/CVERecord?id=CVE-2024-47248";>CVE-2024-47248 </a> | Buffer overflow in NimBLE MESH Bluetooth stack | NimBLE through 1.7.0 | NimBLE 1.8.0 | | <a href="https://www.cve.org/CVERecord?id=CVE-2024-24746";>CVE-2024-24746 </a> | Loop with Unreachable Exit Condition | NimBLE through 1.6.0 | NimBLE 1.7.0 |
