VULNERABILITY INTELLIGENCE

CVE-2024-45434

CVSS score9.8 CRITICAL
EPSS probability7.31%
CISA KEVNot currently listed
Published2025-09-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of validating the existence of an object before performing operations on the object (aka use after free). An attacker can leverage this to achieve remote code execution in the context of a user account under which the Bluetooth process runs.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-416

Primary references