CVE-2025-53470

Published January 10th, 2026

View on NVD ↗

CVSS v3

3.1

LOW

CVSS v2

N/A

Affected

PROJECT

Description

Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could lead to invalid memory read in H4 driver. This issue affects Apache NimBLE: through 1.8. This issue requires a broken or bogus Bluetooth controller and thus severity is considered low. Users are recommended to upgrade to version 1.9, which fixes the issue.

apache/mynewt-nimble

Apache mynewt

GitHub

874