Researchers found critical PerfektBlue flaws in OpenSynergy BlueSDK, allowing remote code execution to hack millions of vehicles' systems.

Researchers uncover PerfektBlue flaws in OpenSynergy’s BlueSDK, exposing millions of vehicles to remote code execution

PCA Cyber Security researchers identified and announced critical vulnerabilities in the Bluetooth stack of Blue SDK. PCA Researchers name the discovered vulnerability chain PerfektBlue. PerfektBlue - ...

Four vulnerabilities dubbed PerfektBlue and affecting the BlueSDK Bluetooth stack from OpenSynergy can be exploited to achieve remote code execution and potentially allow access to critical elements in vehicles from multiple vendors, including Mercedes-Benz AG, Volkswagen, and Skoda.

Overview PerfektBlue is a chained Bluetooth Low Energy (BLE) attack that targets the OpenSynergy BlueSDK — a widely used Bluetooth protocol stack embedded in millions of automotive infotainment sys…

Four vulnerabilities dubbed PerfektBlue and affecting the BlueSDK Bluetooth stack from OpenSynergy can be exploited to achieve remote code execution and potentially allow access to critical elements…

Four vulnerabilities dubbed PerfektBlue and affecting the BlueSDK Bluetooth stack from OpenSynergy can be exploited to achieve remote code execution and potentially allow access to critical elements i...

Bluetooth Exploits in Cars: A Growing Threat A new set of critical Bluetooth security flaws, dubbed PerfektBlue, has exposed millions of vehicles and devices across multiple industries to potential cyberattacks. The vulnerabilities, found in the BlueSDK Bluetooth stack from OpenSynergy, can be chained to achieve remote code execution (RCE), offering attackers access to in-car systems through infotainment units. Automakers like Volkswagen, Mercedes-Benz, and Skoda are among those affected, but many others could also be vulnerable without realizing it.

Four vulnerabilities dubbed PerfektBlue and affecting the BlueSDK Bluetooth stack from OpenSynergy can be exploited to achieve remote code execution and potentially allow access to critical elements in vehicles from multiple vendors, including Mercedes-Benz AG, Volkswagen, and Skoda. [...]

Four vulnerabilities dubbed PerfektBlue and affecting the BlueSDK Bluetooth stack from OpenSynergy can be exploited to achieve remote code execution and potentially allow access to critical elements i...

Researchers found critical PerfektBlue flaws in OpenSynergy BlueSDK, allowing remote code execution to hack millions of vehicles’ systems. Researchers at PCA Cyber Security identified a set of critical vulnerabilities, collectively tracked as PerfektBlue, in OpenSynergy BlueSDK Bluetooth stack. The exploitation of the flaws potentially allows remote code execution in millions of vehicles. These flaws could […]

Four vulnerabilities dubbed PerfektBlue and affecting the BlueSDK Bluetooth stack from OpenSynergy can be exploited to achieve remote code execution and potentially allow access to critical elements in vehicles from multiple vendors, including Mercedes-Benz AG, Volkswagen, and Skoda. [...]

Four vulnerabilities dubbed PerfektBlue and affecting the BlueSDK Bluetooth stack from OpenSynergy can be exploited to achieve remote code execution and potentially allow access to critical elements i...

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of validating the existence of an object before performing operations on the object (aka use after free). An attacker can leverage this to achieve remote …

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper return control flow after detecting an unusual condition. An attacker can leverage this to bypass a security validation and make the …

2025年7月7日、セキュリティ企業PCAは、Bluetoothスタック「OpenSynergy BlueSDK」に内在する複数の深刻な脆弱性を明らかにし、それらを組み合わせた攻撃チェーン「PerfektBlue」として公表しました。これにより、世界中の自動車メーカーを含む多くの業界で利用されているBluetooth機器が、1クリックでリモートコード実行（RCE）されるリスクに晒されていることが明...

Cybersecurity researchers have uncovered a set of four security vulnerabilities in the Bluetooth stack BlueSDK from OpenSynergy. These vulnerabilities, dubbed PerfektBlue, can be exploited together to enable remote code execution on millions of vehicles from various manufacturers. The flaws affect at least three major automakers. Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code on the affected vehicles.

Four vulnerabilities, collectively known as PerfektBlue, affect the Bluetooth BlueSDK stack from OpenSynergy. These flaws allow for remote execution of arbitrary code and can provide access to critical components in vehicles from manufacturers such as Mercedes-Benz AG, Volkswagen, and Skoda. The potential impacts include compromising the security of automotive systems.

Owlet (NYSE OWLT) has announced a partnership with OpenSynergy to integrate the company’s BlueSDK Bluetooth® software stack into Owlet’s next-generation Dr

Researchers found critical PerfektBlue flaws in OpenSynergy BlueSDK, allowing remote code execution to hack millions of vehicles' systems.

Four vulnerabilities dubbed PerfektBlue and affecting the BlueSDK Bluetooth stack from OpenSynergy can be exploited to achieve remote code execution and potentially allow access to critical elements in vehicles from multiple vendors, including Mercedes-Benz AG, Volkswagen, and Skoda. [...]