CVE-2024-45434

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of validating the existence of an object before performing operations on the object (aka use after free). An attacker can leverage this to achieve remote code execution in the context of a user account under which the Bluetooth process runs.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Sep 12, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-454359.8Chartist 1.x through 1.3.0 allows Prototype Pollution via the extend function.CVE-2024-454367.5extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.CVE-2024-454389.1An issue was discovered in TitanHQ SpamTitan Email Security Gateway 8.00.x before 8.00.101 and 8.01.x before 8.01.14. The file quarantine.ph CVE-2024-45449.8The Pie Register - Social Sites Login (Add on) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including,CVE-2024-454405.3core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_co CVE-2024-454417.5Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability CVE-2024-454427.5Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability w CVE-2024-454439.1Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and conf CVE-2024-454445.5Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service conf CVE-2024-454455.5Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will af CVE-2024-454465.5Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulnerability will affect a CVE-2024-454475.5Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may affect service confide