CVE-2026-45816
Received Received - Intake

NULL Pointer Dereference in Apache NimBLE

Publication date: 2026-07-24

Last updated on: 2026-07-24

Assigner: Apache Software Foundation

Description
NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asserts (otherwise assert would trigger before NULL dereference) and bogus (or misbehaving) controller, thus severity is low. This issue affects Apache NimBLE: through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-24
Last Modified
2026-07-24
Generated
2026-07-24
AI Q&A
2026-07-24
EPSS Evaluated
N/A
NVD
CVE-2026-45816
EUVD
EUVD-2026-48566

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
apache nimble to 1.10.0 (exc)
apache nimble 1.10.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a NULL Pointer Dereference vulnerability in Apache NimBLE affecting the LE Long Term Key Request event. It occurs when handling an invalid connection handle in the ble_sm_ltk_req_rx function. The issue requires disabled assertions and a misbehaving controller to trigger, leading to undefined behavior or crashes.

Detection Guidance

Detection requires checking for Apache NimBLE versions through 1.9.0. Use commands like 'nimble version' or inspect package managers for version details. Monitor logs for crashes in the nimble/host component during BLE security manager operations.

Impact Analysis

The impact is limited due to the need for disabled assertions and a bogus controller. It could cause crashes or undefined behavior in the BLE security manager, potentially disrupting Bluetooth Low Energy operations if exploited.

Compliance Impact

This vulnerability is unlikely to directly impact compliance with standards like GDPR or HIPAA. The issue involves a NULL pointer dereference in a Bluetooth Low Energy component, which requires specific conditions (disabled asserts and a misbehaving controller) to exploit. It primarily causes crashes under rare circumstances rather than data breaches or unauthorized access.

Mitigation Strategies

Upgrade Apache NimBLE to version 1.10.0 or later. This version includes the fix for the NULL pointer dereference in the ble_sm_ltk_req_rx function. Ensure debug assertions are enabled to catch similar issues during development.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-45816. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart