VULNERABILITY INTELLIGENCE

CVE-2026-46452

CVSS score5.3 MEDIUM

EPSS probability0.91%

CISA KEVNot currently listed

Published2026-07-24

Last modified2026-10-24

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken data toward application resulting in memory pressure and unstable parsing behavior. This issue affects Apache NimBLE: through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue.

Weakness classification

security@apache.org: CWE-20

Primary references

security@apache.org — Patch
security@apache.org — Mailing List, Vendor Advisory, Patch
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory