Description

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of validating the existence of an object before performing operations on the object (aka use after free). An attacker can leverage this to achieve remote code execution in the context of a user account under which the Bluetooth process runs.

INFO

Published Date :

2025-09-12T00:00:00.000Z

Last Modified :

2025-09-12T17:31:13.731Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2024-45434 vulnerability.

Vendors Products
Opensynergy
  • Blue Sdk
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-45434.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact