CyberSec.Space Logo
Back to CVE Browser

CVE-2026-46452

MEDIUM
5.3
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2026-07-24
Last Modified2026-07-24
Data SourcesNVD

Vulnerability Description

Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken data toward application resulting in memory pressure and unstable parsing behavior. This issue affects Apache NimBLE: through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://github.com/apache/mynewt-nimble/commit/593f95227a4073efde840a9bb34614929dfa7ed1
🔗 https://lists.apache.org/thread/ym80ogxj3398khvxxogxroz4gvgw3ssg
🔗 http://www.openwall.com/lists/oss-security/2026/07/24/16

Related Vulnerabilities

CVE-2026-660535.9

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache T...

CVE-2026-586628.7

Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue af...

CVE-2026-583898.7

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue affects Apache Thri...

CVE-2026-580236.9

Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are re...

CVE-2026-46452 Detail & Impact Analysis | CVSS 5.3 (MEDIUM) | Cyber-Sec.Space | Cyber-Sec.Space