CVE-2026-18278

The Sony XAV-9500ES infotainment system's prh_l2_decode_packet function lacks proper validation of Bluetooth L2CAP packet data, causing an out-of-bounds buffer read. Attackers must first pair a malicious Bluetooth device, then can disclose sensitive information; chaining with other flaws may enab...

EUVD-2026-63425

Sony XAV-9500ES prhl2decodepacket Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...