OpenSynergy BlueSDK (aka Blue SDK) through 6.x mishandles a function call. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from an incorrect variable used as a function argument. An attacker can leverage this to cause unexpected behavior or obtain sensitive information.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NOpensynergy Blue Sdk
APPOpensynergy≤ 6.0.1
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
Related vulnerabilities
CVE-2024-45434CRITICAL9.8PL ✓ten sam produkt
Use-After-Free w OpenSynergy BlueSDK umożliwia zdalne wykonanie kodu
CVE-2018-20378HIGH7.5ten sam produkt
The L2CAP signaling channel implementation and SDP server implementation in OpenSynergy Blue SDK 3.2 through 6...
CVE-2024-45431MEDIUM5.3ten sam produkt
OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within ...
CVE-2024-45433MEDIUM6.5ten sam produkt
OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists wi...