CVE-2025-53477: Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layer
NULL Pointer Dereference vulnerability in Apache Nimble.
Missing validation of HCI connection complete or HCI command TX buffer could lead to NULL pointer dereference. This issue requires disabled asserts and broken or bogus Bluetooth controller and thus severity is considered low.
This issue affects Apache NimBLE: through 1.8.0.
Users are recommended to upgrade to version 1.9.0, which fixes the issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53477?
The severity of CVE-2025-53477 is considered low due to the specific conditions required for exploitation.
How do I fix CVE-2025-53477?
To fix CVE-2025-53477, ensure you update to a version of Apache NimBLE that includes the patches for this vulnerability.
What causes the NULL Pointer Dereference in CVE-2025-53477?
CVE-2025-53477 is caused by missing validation of HCI connection complete or HCI command TX buffer.
Which versions of Apache NimBLE are affected by CVE-2025-53477?
Apache NimBLE versions prior to 1.8.0 are affected by CVE-2025-53477.
Is CVE-2025-53477 exploitable in normal conditions?
Exploitation of CVE-2025-53477 requires disabled asserts and the use of a broken or bogus Bluetooth controller.