CVE-2022-23747

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback...

CVE-2022-23747

CVE-2022-23747 affects Sony Xperia series 1, 5, and Pro. Connected PT-2022-4245 details a buffer/overrun in the ALAC decoder (libMtkOmxAlacDec.so) caused by missing validation of the number of frames during music playback, leading to out-of-bounds memory access and potential remote arbitrary code...

Sony Xperia 系列安全漏洞

The Sony Xperia series is a line of smartphones from the Japanese company Sony Sony. A security vulnerability exists in the Sony Xperia 1, 5, and Pro series versions, which stems from a lack of validation of the number of frames passed during music playback, which may result in memory access...

CVE-2022-23747: Buffer Copy without Checking Size of Input

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback...

CVE-2022-27094

Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

Code injection

Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

CVE-2022-27094

CVE-2022-27094 affects Sony PlayMemories Home v6.0. The vulnerability is an unquoted service path used by a Windows service, enabling local privilege escalation to SYSTEM. Documented impact is high for confidentiality, integrity, and availability, with CVSS v3.1 metrics (LOCAL access, LOW attack ...

CVE-2022-27094

Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

Sony PlayMemories Home 代码问题漏洞

Sony PlayMemories Home is an image management software from Sony Japan. It is capable of managing and editing photos and videos on a PC. A security vulnerability exists in Sony PlayMemories Home version v6.0, which stems from the inclusion of an unreferenced service path that allows an attacker t...

CVE-2022-27094: Unquoted Search Path or Element

Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

PT-2022-18218

Name of the Vulnerable Software and Affected Versions Sony PlayMemories Home version 6.0 Description The issue allows attackers to escalate privileges to the system level due to an unquoted service path. Recommendations For Sony PlayMemories Home version 6.0, update to a version that quotes the...

Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla prior to v1.0.10 relies on the HOME environment variable, which might be untrusted...

GHSA-4Q2W-RW7M-XQW6 Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla prior to v1.0.10 relies on the HOME environment variable, which might be untrusted...

sony-co.com Cross Site Scripting vulnerability OBB-2484022

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sony-centr-24.ru Cross Site Scripting vulnerability OBB-2466556

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Sony: Response Manipulation leads to Admin Panel Login Bypass at https://██████/

The researcher reported that the authentication of a Sony endpoint could be bypassed by manipulating the response to a login request. By changing the value of a response parameter, the researcher bypassed the authentication and was able to gain access to an admin portal...

Sony Playmemories Home Unquoted Service Path

Exploit Title: Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path Date: 09/03/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.sony.com/ Software Link: https://support.d-imaging.sony.co.jp/www/disoft/int/download/playmemories-home/win/en/index.html Version: 6.0...

Sony playmemories home - (PMBDeviceInfoProvider) Unquoted Service Path Vulnerability

Exploit Title: Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path Exploit Author: Saud Alenazi Vendor Homepage: https://www.sony.com/ Software Link: https://support.d-imaging.sony.co.jp/www/disoft/int/download/playmemories-home/win/en/index.html Version: 6.0 Tested: Windows 10...

Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path

Exploit Title: Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path Date: 09/03/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.sony.com/ Software Link: https://support.d-imaging.sony.co.jp/www/disoft/int/download/playmemories-home/win/en/index.html Version: 6.0...

imagemagick:encoder_dng_fuzzer: Crash in LibRaw::malloc

Detailed Report: https://oss-fuzz.com/testcase?key=6248861100802048 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xf1800000 Crash State: LibRaw::malloc...