CVE-2024-45434

Published: Sep 12, 2025Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of validating the existence of an object before performing operations on the object (aka use after free). An attacker can leverage this to achieve remote code execution in the context of a user account under which the Bluetooth process runs.

Affected (1)

Products: Opensynergy: Blue Sdk

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opensynergy Blue Sdk	Up to 6.0.1

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (3)

https://pcacybersecurity.com/resources/advisory/perfekt-blue

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.opensynergy.com/

Source: cve@mitre.org

Product

https://pcacybersecurity.com/resources/advisory/perfekt-blue

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitThird Party Advisory

Timeline

No history available yet.