CVE-2026-18282

Sony XAV-9500ES AVRCPBrResponseParser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...

CVE-2026-18282

The Sony XAV-9500ES infotainment system is vulnerable to a heap-based buffer overflow in the AVRCP_Br_Response_Parser component. The parser fails to validate the length of attacker-supplied AVRCP packet data before copying it to a heap buffer, enabling remote code execution after an attacker pair...

CVE-2022-33280

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet...

EUVD-2022-36323

Malicious code in bioql PyPI...

CVE-2022-33280 Access of uninitialized pointer in Bluetooth HOST

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet...

CVE-2022-33280

CVE-2022-33280 describes a memory corruption in the Bluetooth HOST when processing AVRCP packets due to an uninitialized pointer. The issue is attributed to Qualcomm components (Bluetooth) and is listed across multiple feeds (NVD, Red Hat, CVE.org, CNNVD, etc.) as a memory corruption vulnerabilit...