Description
NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asserts (otherwise assert would trigger before NULL dereference) and bogus (or misbehaving) controller, thus severity is low. This issue affects Apache NimBLE: through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue.
Affected products
apache: nimble
References3
- lists.apache.org/thread/psppdk5j8jnq1m4jn96tnfofspgqvzvn Mailing ListVendor Advisory
- github.com/apache/mynewt-nimble/commit/9448c5f495eb55018121b24a… Patch
- www.openwall.com/lists/oss-security/2026/07/24/15 Mailing ListThird Party Advisory
Metrics
- CVSS 3.1
-
7.5
HIGH
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS — exploit probability
- 1% percentile: 64 · as of 14 November 2026
- CWE
- CWE-476
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.