168 matches found
CVE-2026-18280: Buffer Copy without Checking Size of Input
Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...
CVE-2026-18279: Buffer Copy without Checking Size of Input
Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...
PT-2026-65943
Name of the Vulnerable Software and Affected Versions Sony XAV-9500ES affected versions not specified Description Network-adjacent attackers can execute arbitrary code on affected devices without authentication. The issue occurs during the handling of SETUP RTSP packets, where the device fails to...
PT-2026-65944
Name of the Vulnerable Software and Affected Versions Sony XAV-9500ES affected versions not specified Description Physically present attackers can execute arbitrary code on affected devices without requiring authentication. The issue occurs within the gpsd daemon during the handling of NMEA data,...
PT-2026-65945
Sony XAV-9500ES l2 reassemble sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...
PT-2026-65948
Name of the Vulnerable Software and Affected Versions Sony XAV-9500ES affected versions not specified Description A local privilege escalation flaw exists in the crash dump handler. The issue occurs because the system fails to properly validate a user-supplied string before using it in a system...
PT-2026-65946
Name of the Vulnerable Software and Affected Versions Sony XAV-9500ES affected versions not specified Description A heap-based buffer overflow exists in the AVRCP Br Response Parser due to insufficient validation of the length of user-supplied data before it is copied to a heap-based buffer...
PT-2026-65947
Name of the Vulnerable Software and Affected Versions Sony XAV-9500ES affected versions not specified Description An authorization bypass exists in the udev rules of the system. A physically present attacker can connect a crafted USB device to trigger the instantiation of restricted USB device...
PT-2026-65942
Name of the Vulnerable Software and Affected Versions Sony XAV-9500ES affected versions not specified Description An information disclosure flaw exists in the handling of Bluetooth L2CAP packets. The issue occurs due to improper validation of user-supplied data, leading to an out-of-bounds read...
(Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...
(Pwn2Own) Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability
This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the udev rules. A crafted USB device connected to the system can trigg...
(Pwn2Own) Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NMEA data by the gpsd daemon. The issue results from...
(Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exis...
(Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exis...
(Pwn2Own) Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SETUP RTSP packets. The issue results from the lack of...
(Pwn2Own) Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific...
EUVD-2024-21352
Malicious code in bioql PyPI...
EUVD-2025-18883
Malicious code in bioql PyPI...