CVE-2024-45431
OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within the BlueSDK Bluetooth stack. T
CVSS
5.3
Medium
EPSS
5.6%
p93
KEV
—
Exploit Today
28
0-100
Published: Sep 12, 2025 · Last modified: Oct 27, 2026 · CWE-20
5.6%EPSS · 30 days5.6%
2026-10-062026-11-02
OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper validation of remote L2CAP channel ID (CID). An attacker can leverage this to create an L2CAP channel with the null identifier assigned as a remote CID.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-794057.5 HIG—
———In Modem Firmware, there is a possible system crash due to improper input validation of dedicated PUCCH configuration. This could lead to remote denial of service with no additional execution privileges needed.2hCVE-2026-1166546.5 MED—
———Tanium addressed an improper input validation vulnerability in Threat Response.7hCVE-2026-1166534.3 MED—
———Tanium addressed an improper input validation vulnerability in Threat Response.7hCVE-2026-121242——
———Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)9hCVE-2026-121240——
———Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)9hCVE-2026-121236——
———Improper input validation in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)9h