PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-45811 Apache Software Foundation CVE debrief

CVE-2026-45811 is a Buffer Copy without Checking Size of Input vulnerability in Apache NimBLE. The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. This issue affects Apache NimBLE through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue. The vulnerability requires either a misconfigured pool size or a malicious/compromised controller on the other end of the HCI socket link, not over-the-air Bluetooth access. The CVSS score for this vulnerability is 7.5, with a HIGH severity rating.

Vendor
Apache Software Foundation
Product
Apache NimBLE
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-24
Original CVE updated
2026-07-27
Advisory published
2026-07-24
Advisory updated
2026-07-27

Who should care

Users of Apache NimBLE versions through 1.9.0 should be aware of this vulnerability and take steps to upgrade to version 1.10.0. This vulnerability requires either a misconfigured pool size or a malicious/compromised controller on the other end of the HCI socket link, not over-the-air Bluetooth access.

Technical summary

The CVE-2026-45811 vulnerability is a Buffer Copy without Checking Size of Input vulnerability in Apache NimBLE. The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. The CVSS score for this vulnerability is 7.5, with a HIGH severity rating. The vulnerability was published on 2026-07-24T13:18:23.847Z and last modified on 2026-07-27T14:41:24.173Z.

Defensive priority

Medium

Recommended defensive actions

  • Upgrade to version 1.10.0 of Apache NimBLE
  • Review and adjust HCI socket transport configurations
  • Monitor for suspicious HCI event activity
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record was published on 2026-07-24T13:18:23.847Z and was last modified on 2026-07-27T14:41:24.173Z. The NVD entry is currently Analyzed. The source detail is limited, so evidence limits should be considered when verifying this vulnerability. Defenders should verify the affected scope, severity, and vendor guidance with official sources. The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. This issue affects Apache NimBLE through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue. The CVSS score for this vulnerability is 7.5, with a HIGH severity rating.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-45811 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-45811

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-45811 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-45811

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.