IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-01-10 10:15

MODIFIED

2026-01-10 10:15

EPSS (Prob. Exploit)

0.82%

Top 42.7%

DATA SOURCES:

NVD 🔗 2026-01-10 CVE PROJECT 🔗 2026-01-19 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08

> DESCRIPTION

NULL Pointer Dereference vulnerability in Apache Nimble. Missing validation of HCI connection complete or HCI command TX buffer could lead to NULL pointer dereference. This issue requires disabled asserts and broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.8.0. Users are recommended to upgrade to version 1.9.0, which fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-476

> CWE DETAILED DESCRIPTIONS

CWE-476: NULL Pointer Dereference - The product dereferences a pointer that it expects to be valid but is NULL.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layer

AFFECTED PACKAGES:

Unknown / Unknown

8 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition

10/01/2026 10:15

Source: NVD

📊 ENRICHISSEMENT 01/02/2026 06:44

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

CWE-476: NULL Pointer Dereference - The product dereferences a pointer that it expects to be valid but is NULL.

📊 ENRICHISSEMENT 19/01/2026 17:38

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui

Total des modifications: 2 Dernière mise à jour: 9 months ago

> REFERENCES

https://github.com/apache/mynewt-nimble/commit/0caf9baeb271ede85fcc5237ab87ddbf9...

https://github.com/apache/mynewt-nimble/commit/3160b8c4c7ff8db4e0f9badcdf7df684b...

https://lists.apache.org/thread/1dxthc132hwm2tzvjblrtnschcsbw2vo

http://www.openwall.com/lists/oss-security/2026/01/08/3