CVE-2024-45433

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping

Medium · published September 12, 2025

CVSS v3.1
6.5
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper return control flow after detecting an unusual condition. An attacker can leverage this to bypass a security validation and make the incoming data be processed.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00555 · 45.5th percentile
Published
2025-09-12T00:00Z
EPSS history
Timeline
  • 12 SEP 00:00Z
    OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping
    cvelistv5