CVE-2025-53470
Severity CVSS v4.0:
Pending analysis
Type:
CWE-125
Out-of-bounds Read
Publication date:
10/01/2026
Last modified:
10/01/2026
Description
Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could lead to invalid memory read in H4 driver.<br />
<br />
This issue affects Apache NimBLE: through 1.8. <br />
<br />
This issue requires a broken or bogus Bluetooth controller and thus severity is considered low.<br />
<br />
Users are recommended to upgrade to version 1.9, which fixes the issue.