Dashboard / CVE-2024-45434

CVE-2024-45434

CRITICAL
INFO Priority: 0.73 BB Relevance: 81/100
Published: 2025-09-12 Modified: 2026-11-09 First seen: 2026-11-09 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of validating the existence of an object before performing operations on the object (aka use after free). An attacker can leverage this to achieve remote code execution in the context of a user account under which the Bluetooth process runs.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
opensynergy blue_sdk < 6.0.1

References & Advisories (2)

Bug Bounty Relevance

81 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

7.46%
Raw Score 0.074610
Percentile 94.6%
Date 2026-11-13

EPSS Trend

2026-11-13
0.07461
2026-11-12
0.07461
2026-11-10
0.07314
2026-11-09
0.07523
2026-11-08
0.07314

Intelligence Sources

nvd ref →

External Links