CVE-2026-44634

SimpleBLE is a cross-platform library and bindings for Bluetooth Low Energy (BLE). Prior to version 0.14.0, there are multiple stack-based buffer overflow vulnerabilities in SimpleBLE. There is a stack overflow vulnerability in the dongl backend’s Protocol::simpleble_write function (local, caller-controlled input). A stack overflow vulnerability when processing manufacturer-specific data in BLE advertisements (remote, no pairing or connection required). Lastly, a stack overflow vulnerability when processing service data in BLE advertisements (remote, no pairing or connection required). This issue has been patched in version 0.14.0.

• CWE-121
• CWE-787

• https://github.com/simpleble/simpleble/commit/1501d59d76a4280268372afb1b157bf6caeacba6
• https://github.com/simpleble/simpleble/pull/466
• https://github.com/simpleble/simpleble/releases/tag/v0.14.0
• https://github.com/simpleble/simpleble/security/advisories/GHSA-8h89-q8m2-c8fp

Published

Jun 10, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44629Improper access control to the Synergis Softwire installatio…7.9
• CVE-2026-4463Heap buffer overflow in WebRTC in Google Chrome prior to 146…8.8
• CVE-2026-44630Improper validation of length fields in the Apache IoTDB RPC…7.5
• CVE-2026-44631Buffer Underwrite vulnerability in Apache HTTP Server on cra…9.8
• CVE-2026-44632Yamcs is a mission control framework. Prior to 5.12.7, a ser…9.1
• CVE-2026-44633Live Helper Chat is an open-source application that enables …8.1
• CVE-2026-44635Kysely is a type-safe TypeScript SQL query builder. From 0.2…7.5
• CVE-2026-44636libsixel is a SIXEL encoder/decoder implementation derived f…7.8
• CVE-2026-44637libsixel is a SIXEL encoder/decoder implementation derived f…7.1
• CVE-2026-44638libsixel is a SIXEL encoder/decoder implementation derived f…2.5
• CVE-2026-44639NanoMQ is an MQTT broker. Prior to 0.24.14, NanoMQ's MQTT v5…3.7
• CVE-2026-4464Integer overflow in ANGLE in Google Chrome prior to 146.0.76…8.8