IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-07-24 13:18

MODIFIED

2026-07-24 13:18

EPSS (Prob. Exploit)

1.03%

Top 36.6%

DATA SOURCES:

NVD 🔗 2026-07-24 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-07-31

> DESCRIPTION

NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asserts (otherwise assert would trigger before NULL dereference) and bogus (or misbehaving) controller, thus severity is low. This issue affects Apache NimBLE: through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-476

> CWE DETAILED DESCRIPTIONS

CWE-476: NULL Pointer Dereference - The product dereferences a pointer that it expects to be valid but is NULL.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request

AFFECTED PACKAGES:

Unknown / Unknown

10 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition

24/07/2026 13:18

Source: NVD

📊 ENRICHISSEMENT 01/08/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

CWE-476: NULL Pointer Dereference - The product dereferences a pointer that it expects to be valid but is NULL.

Total des modifications: 1 Dernière mise à jour: 3 months ago

> REFERENCES

https://github.com/apache/mynewt-nimble/commit/9448c5f495eb55018121b24a9dab5305c...

https://lists.apache.org/thread/psppdk5j8jnq1m4jn96tnfofspgqvzvn