CVE-2024-45432

OpenSynergy BlueSDK (Blue SDK) Bluetooth stack up to 6.x contains a flaw caused by an incorrect variable used as a function argument (and related network-packet handling issues in some reports). The vulnerability can lead to unexpected behavior and potential information disclosure, with CVE-2024-...

CVE-2018-20378

CVE-2018-20378 affects OpenSynergy Blue SDK versions 3.2–6.0, where the L2CAP signaling channel and SDP server allow remote, unauthenticated attackers to execute arbitrary code or cause a denial of service via malicious L2CAP configuration requests, when coupled with crafted SDP traffic over misc...

CVE-2024-45431

OpenSynergy BlueSDK (Blue SDK) before and including version 6.x contains an Improper Input Validation flaw in the Bluetooth stack: the remote L2CAP channel ID (CID) is not properly validated, allowing an L2CAP channel to be created with a null remote CID. This has been described in multiple sourc...

CVE-2024-45434

CVE-2024-45434 affects OpenSynergy BlueSDK (Bluetooth stack) up through 6.x. The flaw is a use-after-free caused by not validating object existence before operations, enabling remote code execution under the Bluetooth process user. Multiple sources corroborate the vulnerability in BlueSDK, with i...

CVE-2024-45433

OpenSynergy BlueSDK Bluetooth stack (BlueSDK) up to version 6.x is affected by an Incorrect Control Flow Scoping flaw. The root cause is improper handling of exceptional conditions and lack of proper return control flow after detecting an unusual state, enabling bypass of security validation and ...