CVE-2024-45433

MediumCVSS 6.5/10Last modified Nov 9, 2026

Description

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper return control flow after detecting an unusual condition. An attacker can leverage this to bypass a security validation and make the incoming data be processed.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-705

Affected software

No affected versions have been published.

Timeline

Published: Sep 12, 2025
Last modified: Nov 9, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-454349.8OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free. The specific flaw exists within the BlueSDK Bluetooth stack. The issue CVE-2024-454359.8Chartist 1.x through 1.3.0 allows Prototype Pollution via the extend function.CVE-2024-454367.5extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.CVE-2024-454389.1An issue was discovered in TitanHQ SpamTitan Email Security Gateway 8.00.x before 8.00.101 and 8.01.x before 8.01.14. The file quarantine.ph CVE-2024-45449.8The Pie Register - Social Sites Login (Add on) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including,CVE-2024-454405.3core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_co CVE-2024-454417.5Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability CVE-2024-454427.5Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability w CVE-2024-454439.1Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and conf CVE-2024-454445.5Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service conf CVE-2024-454455.5Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will af CVE-2024-454465.5Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulnerability will affect a