Skip to content
Sign in
Not rated

CVE-2025-62235 Authentication Bypass by Spoofing vulnerability in Apache NimBLE

Description

Authentication Bypass by Spoofing vulnerability in Apache NimBLE. Receiving specially crafted Security Request could lead to removal of original bond and re-bond with impostor. This issue affects Apache NimBLE: through 1.8.0. Users are recommended to upgrade to version 1.9.0, which fixes the issue.

Affected products and versions

Product Affected versions Fixed in
Apache Mynewt NimBLE 1.8 earliest → 1.8.0 No fix stated

Other CVEs of Apache Mynewt NimBLE

The 4 CVEs of Apache Mynewt NimBLE →
CVE-2025-52435 J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE Not rated CVE-2025-53470 Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver Not rated CVE-2025-53477 NULL Pointer Dereference vulnerability in Apache Nimble Not rated
Track this CVE