Sony vulnerabilities
41 CVEs and advisories name Sony as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-116104Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection
- CVE-2026-116103Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection
- CVE-2026-18284Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability
- CVE-2026-18283Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability
- CVE-2026-18282Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-18281Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-18280Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability
- CVE-2026-18279Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-18278Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2026-59776Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017.
- CVE-2026-50255Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier.
- CVE-2025-64390A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02.
- CVE-2025-64772The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Li
- CVE-2025-64730Cross-site scripting vulnerability exists in SNC-CX600W all versions.
- CVE-2025-62497Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0.
- CVE-2025-62225Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path.
- CVE-2025-5475Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability
- CVE-2025-5477Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-5478Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability
- CVE-2025-5479Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-5476Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability
- CVE-2025-5820Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability
- CVE-2025-5124Sony SNC-M1 Administrative Interface default credentials
- CVE-2024-23922Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability
- CVE-2024-23972Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-23934Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-23933Sony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2022-41796Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileg
- CVE-2022-3349Sony PS4/PS5 exFAT UVFAT_readupcasetable heap-based overflow
- CVE-2021-20793Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.