CVE-2026-45815

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45815", "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "state": "PUBLISHED", "assignerShortName": "apache", "dateReserved": "2026-05-13T09:31:25.414Z", "datePublished": "2026-07-24T12:10:38.456Z", "dateUpdated": "2026-07-24T18:20:48.428Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Apache NimBLE", "vendor": "Apache Software Foundation", "versions": [{"lessThanOrEqual": "1.9.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "Amemoyoi https://github.com/Amemoyoi"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Reachable Assertion vulnerability in Apache NimBLE.<br>A specially crafted&nbsp;<span style=\"background-color: rgb(255, 255, 255);\">ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) may trigger assert in ATT parser.</span></p><p><span style=\"background-color: rgb(255, 255, 255);\">Severity is medium as this requires DUT to first send <span style=\"background-color: rgb(255, 255, 255);\">ATT Read Multiple Variable Request.</span></span></p><p>This issue affects Apache NimBLE: through 1.9.0.</p><p>Users are recommended to upgrade to version 1.10.0, which fixes the issue.</p>"}], "value": "Reachable Assertion vulnerability in Apache NimBLE.\nA specially crafted\u00a0ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) may trigger assert in ATT parser.\n\nSeverity is medium as this requires DUT to first send ATT Read Multiple Variable Request.\n\nThis issue affects Apache NimBLE: through 1.9.0.\n\nUsers are recommended to upgrade to version 1.10.0, which fixes the issue."}], "metrics": [{"other": {"content": {"text": "moderate"}, "type": "Textual description of severity"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-617", "description": "CWE-617 Reachable Assertion", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "shortName": "apache", "dateUpdated": "2026-07-24T12:10:38.456Z"}, "references": [{"tags": ["patch"], "url": "https://github.com/apache/mynewt-nimble/commit/fae6a4874309ba0175d2c444e20f8a6bde007425"}, {"tags": ["vendor-advisory"], "url": "https://lists.apache.org/thread/3d09hgo5zmm7dnryst3tb9857hk1bbos"}], "source": {"discovery": "UNKNOWN"}, "title": "Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/07/24/14"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-07-24T14:34:46.278Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-07-24T18:20:30.342440Z", "id": "CVE-2026-45815", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-24T18:20:48.428Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/07/24/14"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-07-24T14:34:46.278Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-45815", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-24T18:20:30.342440Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-24T18:20:11.247Z"}}], "cna": {"title": "Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "reporter", "value": "Amemoyoi https://github.com/Amemoyoi"}], "metrics": [{"other": {"type": "Textual description of severity", "content": {"text": "moderate"}}}], "affected": [{"vendor": "Apache Software Foundation", "product": "Apache NimBLE", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.9.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/apache/mynewt-nimble/commit/fae6a4874309ba0175d2c444e20f8a6bde007425", "tags": ["patch"]}, {"url": "https://lists.apache.org/thread/3d09hgo5zmm7dnryst3tb9857hk1bbos", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Reachable Assertion vulnerability in Apache NimBLE.\nA specially crafted\u00a0ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) may trigger assert in ATT parser.\n\nSeverity is medium as this requires DUT to first send ATT Read Multiple Variable Request.\n\nThis issue affects Apache NimBLE: through 1.9.0.\n\nUsers are recommended to upgrade to version 1.10.0, which fixes the issue.", "supportingMedia": [{"type": "text/html", "value": "<p>Reachable Assertion vulnerability in Apache NimBLE.<br>A specially crafted&nbsp;<span style=\"background-color: rgb(255, 255, 255);\">ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) may trigger assert in ATT parser.</span></p><p><span style=\"background-color: rgb(255, 255, 255);\">Severity is medium as this requires DUT to first send <span style=\"background-color: rgb(255, 255, 255);\">ATT Read Multiple Variable Request.</span></span></p><p>This issue affects Apache NimBLE: through 1.9.0.</p><p>Users are recommended to upgrade to version 1.10.0, which fixes the issue.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-617", "description": "CWE-617 Reachable Assertion"}]}], "providerMetadata": {"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "shortName": "apache", "dateUpdated": "2026-07-24T12:10:38.456Z"}}}, "cveMetadata": {"cveId": "CVE-2026-45815", "state": "PUBLISHED", "dateUpdated": "2026-07-24T18:20:48.428Z", "dateReserved": "2026-05-13T09:31:25.414Z", "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "datePublished": "2026-07-24T12:10:38.456Z", "assignerShortName": "apache"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Apache NimBLE", "vendor": "Apache Software Foundation", "versions": [{"lessThanOrEqual": "1.9.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@apache.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apache:nimble:*:*:*:*:*:*:*:*", "matchCriteriaId": "86B88229-791C-4BFE-824F-9D9D981C81C9", "versionEndExcluding": "1.10.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Reachable Assertion vulnerability in Apache NimBLE.\nA specially crafted\u00a0ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) may trigger assert in ATT parser.\n\nSeverity is medium as this requires DUT to first send ATT Read Multiple Variable Request.\n\nThis issue affects Apache NimBLE: through 1.9.0.\n\nUsers are recommended to upgrade to version 1.10.0, which fixes the issue."}, {"lang": "es", "value": "Vulnerabilidad de aserci\u00f3n alcanzable en Apache NimBLE.\nUna respuesta ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) especialmente dise\u00f1ada puede activar una aserci\u00f3n en el analizador ATT.\n\nLa severidad es media ya que esto requiere que el DUT env\u00ede primero una solicitud ATT Read Multiple Variable Request.\n\nEste problema afecta a Apache NimBLE: hasta la versi\u00f3n 1.9.0.\n\nSe recomienda a los usuarios actualizar a la versi\u00f3n 1.10.0, la cual corrige el problema."}], "id": "CVE-2026-45815", "lastModified": "2026-10-24T13:10:00.147", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-45815", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-24T18:20:30.342440Z", "version": "2.0.3"}}]}, "published": "2026-07-24T13:18:24.200", "references": [{"source": "security@apache.org", "tags": ["Patch"], "url": "https://github.com/apache/mynewt-nimble/commit/fae6a4874309ba0175d2c444e20f8a6bde007425"}, {"source": "security@apache.org", "tags": ["Mailing List", "Vendor Advisory"], "url": "https://lists.apache.org/thread/3d09hgo5zmm7dnryst3tb9857hk1bbos"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2026/07/24/14"}], "sourceIdentifier": "security@apache.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-617"}], "source": "security@apache.org", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.9.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Apache NimBLE", "source": "cna", "vendor": "Apache Software Foundation"}, "product": "nimble", "vendor": "apache"}], "created": "2026-07-27T06:30:10.371125+00:00", "updated": "2026-08-03T20:30:04.553874+00:00", "vendors": ["apache", "apache$PRODUCT$nimble"]}