CVE-2026-46452

Published: Lug 24, 2026 Last Modified: Lug 24, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,3
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: low

Description

AI Translation Available

Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken data toward application resulting in memory pressure and unstable parsing behavior.

This issue affects Apache NimBLE: through 1.9.0.

Users are recommended to upgrade to version 1.10.0, which fixes the issue.

20

Improper Input Validation

Stable
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Confidentiality Integrity
Potential Impacts:
Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Read Memory Read Files Or Directories Modify Memory Execute Unauthorized Code Or Commands
Applicable Platforms
Technologies: AI/ML
Likelihood of Exploit: High
View CWE Details
http://www.openwall.com/lists/oss-security/2026/07/24/16
http://www.openwall.com/lists/oss-security/2026/07/24/16
https://github.com/apache/mynewt-nimble/commit/593f95227a40…
https://github.com/apache/mynewt-nimble/commit/593f95227a4073efde840a9bb3461492…
https://lists.apache.org/thread/ym80ogxj3398khvxxogxroz4gvg…
https://lists.apache.org/thread/ym80ogxj3398khvxxogxroz4gvgw3ssg