CVE-2024-45432

OpenSynergy BlueSDK (aka Blue SDK) through 6.x mishandles a function call. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from an incorrect variable used as a function argument. An attacker can leverage this to cause unexpected behavior or obtain sensitive information.

• CWE-284

• https://pcacybersecurity.com/resources/advisory/perfekt-blueExploit, Third Party Advisory
• https://www.opensynergy.com/Product

Published

Sep 12, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45424Business logic error in some Zoom Workplace Apps may allow a…7.5
• CVE-2024-45425Incorrect user management in some Zoom Workplace Apps may al…6.5
• CVE-2024-45426Incorrect ownership assignment in some Zoom Workplace Apps m…6.5
• CVE-2024-45429Cross-site scripting vulnerability exists in Advanced Custom…6.1
• CVE-2024-4543The Snippet Shortcodes plugin for WordPress is vulnerable to…4.3
• CVE-2024-45431OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper …5.3
• CVE-2024-45433OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect…6.5
• CVE-2024-45434OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-Aft…9.8
• CVE-2024-45435Chartist 1.x through 1.3.0 allows Prototype Pollution via th…9.8
• CVE-2024-45436extractFromZipFile in model.go in Ollama before 0.1.47 can e…7.5
• CVE-2024-45438An issue was discovered in TitanHQ SpamTitan Email Security …9.1
• CVE-2024-4544The Pie Register - Social Sites Login (Add on) plugin for Wo…9.8