CVE-2026-44634CWE-121CWE-787

Stack buffer overflows in SimpleBLE

High · published June 9, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
46.2
In the wild
Unconfirmed
What it is

SimpleBLE is a cross-platform library and bindings for Bluetooth Low Energy (BLE). Prior to version 0.14.0, there are multiple stack-based buffer overflow vulnerabilities in SimpleBLE. There is a stack overflow vulnerability in the dongl backend’s Protocol::simpleble_write function (local, caller-controlled input). A stack overflow vulnerability when processing manufacturer-specific data in BLE advertisements (remote, no pairing or connection required). Lastly, a stack overflow vulnerability when processing service data in BLE advertisements (remote, no pairing or connection required). This issue has been patched in version 0.14.0.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00566 · 46.2th percentile
Weaknesses
CWE-121 · Stack-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2026-06-09T23:59Z
EPSS history
Timeline
  • 09 JUN 23:59Z
    Stack buffer overflows in SimpleBLE
    cvelistv5