Dashboard / CVE-2026-45813

CVE-2026-45813

HIGH
MEDIUM Priority: 0.05 BB Relevance: 63/100
Published: 2026-07-24 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service. Improper validation when parsing BASS service  "Add Source" and "Modify Source" operation PDU could results in stack buffer overflow or arbitrary out-of-bound read. This can be triggered by nearby devices over Bluetooth connection, however pairing is required prior to accessing BASS service, which depending on device configuration may or may not require user action. This issue affects Apache NimBLE: through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
apache nimble < 1.10.0

References & Advisories (3)

Bug Bounty Relevance

63 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.8 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.53%
Raw Score 0.005270
Percentile 44.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00527
2026-10-28
0.00527

Intelligence Sources

nvd ref →

External Links