CVE-2024-45432

The OpenSynergy BlueSDK (Bluetooth stack) is vulnerable through version 6.x and earlier due to a flaw where an incorrect variable is used as a function argument within the RFCOMM service. An attacker within range (approximately 5 to 7 meters ) can exploit this by pairing with the target's infotai...

CVE-2018-20378

CVE-2018-20378 affects OpenSynergy Blue SDK versions 3.2–6.0, where the L2CAP signaling channel and SDP server allow remote, unauthenticated attackers to execute arbitrary code or cause a denial of service via malicious L2CAP configuration requests, when coupled with crafted SDP traffic over misc...

CVE-2024-45431

The OpenSynergy BlueSDK (also known as Blue SDK ) through version 6.x and prior contains an Improper Input Validation flaw within its Bluetooth stack. The root cause is the failure to properly validate the remote L2CAP channel ID (CID) . An attacker can exploit this vulnerability to bypass existi...

CVE-2024-45434

The OpenSynergy BlueSDK (Bluetooth stack) versions through 6.x are affected by a Use-After-Free vulnerability (CWE-401) within the AVRCP service . The flaw arises from failing to validate an object's existence before performing operations on it. An attacker within Bluetooth range (5 to 7 meters) ...

CVE-2024-45433

The OpenSynergy BlueSDK (Bluetooth stack) is vulnerable to Incorrect Control Flow Scoping (CWE-705) in versions through 6.x . The root cause is a lack of proper return control flow after detecting an unusual condition within the RFCOMM service. This flaw allows an attacker to bypass security vali...