How many CVEs have a located fix in apache/mynewt-nimble?

15 published CVEs have a fix traced to functions in apache/mynewt-nimble, touching 9 functions across 17 files.

Which function in apache/mynewt-nimble has been patched by the most CVEs?

bt_mesh_proxy_msg_recv in nimble/host/mesh/src/proxy_msg.c has been changed by 1 CVE fixes, from 2026 to 2026.

How large is a typical CVE fix in apache/mynewt-nimble?

The median fix changes 9 lines. 67% of fixes change 20 lines or fewer, and 67% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

#381 of 500 repositories

apache/mynewt-nimble

Name: apache/mynewt-nimble: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix July 24, 2026

15

CVE fixes located

Published CVEs

9

Functions patched

Distinct function sites

17

Files patched

Distinct source files

2024–2026

Years covered

By CVE publication date

Overview

15 published CVEs have a fix traced to functions in apache/mynewt-nimble, the earliest published in 2024. Those fixes changed 9 distinct functions across 17 files, in 48 patch hunks.

Among the 500 repositories tracked here, apache/mynewt-nimble ranks #381 by the number of CVEs with a located fix.

Most patched functions

Functions in apache/mynewt-nimble changed by the most CVE fixes.

Most patched files

Files in apache/mynewt-nimble changed by the most CVE fixes.

1nimble/host/src/ble_hs_hci_evt.c4 CVEs · 0 functions
2nimble/host/src/ble_sm.c2 CVEs · 1 functions
3nimble/host/mesh/src/pb_adv.c1 CVEs · 3 functions
4nimble/controller/include/controller/ble_ll_conn.h1 CVEs · 1 functions
5nimble/controller/include/controller/ble_ll_ctrl.h1 CVEs · 1 functions
6nimble/host/audio/services/bass/include/services/bass/ble_audio_svc_bass.h1 CVEs · 1 functions
7nimble/host/mesh/src/proxy_msg.c1 CVEs · 1 functions
8nimble/host/src/ble_hs_conn.c1 CVEs · 1 functions
9nimble/controller/src/ble_ll_conn.c1 CVEs · 0 functions
10nimble/controller/src/ble_ll_conn_hci.c1 CVEs · 0 functions

Fix size

How much code a CVE fix in apache/mynewt-nimble changes, with backports counted once.

9

Median lines changed

Added plus removed, per CVE

67%

Fixes of 20 lines or fewer

Share of CVE fixes

67%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in apache/mynewt-nimble, and the functions each fix changed.

Apache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failure
CVE-2026-46452bt_mesh_proxy_msg_recv
Medium · CVSS 5.3
EPSS 0.9%2026-07-24
Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request
CVE-2026-45816
High · CVSS 7.5
EPSS 1.0%2026-07-24
Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler
CVE-2026-45815
High · CVSS 7.5
EPSS 1.0%2026-07-24
Apache NimBLE: Incorrect data validation in BASS add/modify source operation
CVE-2026-45813ble_svc_audio_bass_operation
High · CVSS 8.8
EPSS 0.5%2026-07-24
Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report Handler
CVE-2026-45812
Medium · CVSS 6.5
EPSS 0.7%2026-07-24
Apache NimBLE: Buffer overflow in socket HCI transport
CVE-2026-45811
High · CVSS 7.5
EPSS 0.5%2026-07-24
Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller
CVE-2025-52435ble_ll_ctrl_enc_allowed_pdu_rx ble_ll_conn_sm_flags
High · CVSS 7.5
EPSS 0.2%2026-01-10
Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver
CVE-2025-53470
Low · CVSS 3.1
EPSS 0.3%2026-01-10
Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layer
CVE-2025-53477
High · CVSS 7.5
EPSS 0.8%2026-01-10
Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing
CVE-2025-62235ble_gap_sec_state
High · CVSS 8.1
EPSS 0.4%2026-01-10
CVE-2024-51569
CVE-2024-51569
High · CVSS 7.5
EPSS 1.2%2024-11-26
CVE-2024-47250
CVE-2024-47250
Medium · CVSS 5.0
EPSS 0.7%2024-11-26

Get an alert for each new apache/mynewt-nimble CVE, with the patched functions and AI-written analysis.

Monitor mynewt-nimble CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

0xJacky/nginx-ui15 CVEs cubecart/v615 CVEs debian/busybox15 CVEs debian/libsoup315 CVEs debian/zziplib15 CVEs decolua/9router15 CVEs DSpace/DSpace15 CVEs ericcornelissen/shescape15 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in apache/mynewt-nimble.

How many CVEs have a located fix in apache/mynewt-nimble?: 15 published CVEs have a fix traced to functions in apache/mynewt-nimble, touching 9 functions across 17 files.
Which function in apache/mynewt-nimble has been patched by the most CVEs?: bt_mesh_proxy_msg_recv in nimble/host/mesh/src/proxy_msg.c has been changed by 1 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in apache/mynewt-nimble?: The median fix changes 9 lines. 67% of fixes change 20 lines or fewer, and 67% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track apache/mynewt-nimble CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing