Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Sony — Vulnerabilities & Security Advisories 20

Browse all 20 CVE security advisories affecting Sony. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Sony operates primarily in consumer electronics, entertainment, and gaming, with products ranging from PlayStation consoles to media services. Historically, the company's systems have been vulnerable to remote code execution, cross-site scripting, and privilege escalation, often through web interfaces and firmware flaws. Notable incidents include the 2011 PlayStation Network breach exposing 77 million users' data, and multiple vulnerabilities in its cameras and IoT devices. Despite improvements, Sony's current 12 CVEs indicate ongoing security challenges, particularly in firmware and web application components. The company's diverse product ecosystem creates complex attack surfaces, requiring continuous vulnerability management to protect user data and maintain system integrity.

CVE ID Title CVSS Severity Published
CVE-2026-18284 Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability — XAV-9500ES CWE-78 - - 2026-08-20
CVE-2026-18283 Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability — XAV-9500ES CWE-285 - - 2026-08-20
CVE-2026-18282 Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability — XAV-9500ES CWE-122 - - 2026-08-20
CVE-2026-18281 Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability — XAV-9500ES CWE-122 - - 2026-08-20
CVE-2026-18280 Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability — XAV-9500ES CWE-120 - - 2026-08-20
CVE-2026-18279 Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability — XAV-9500ES CWE-120 - - 2026-08-20
CVE-2026-18278 Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability — XAV-9500ES CWE-125 - - 2026-08-20
CVE-2025-64390 Sony PlayStation 4 安全漏洞 — PS4 - - 2026-06-02
CVE-2025-5475 Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability — XAV-AX8500 CWE-190 8.8AI High AI 2025-06-21
CVE-2025-5477 Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability — XAV-AX8500 CWE-122 8.8AI High AI 2025-06-21
CVE-2025-5478 Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability — XAV-AX8500 CWE-190 8.8AI High AI 2025-06-21
CVE-2025-5479 Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability — XAV-AX8500 CWE-122 8.8AI High AI 2025-06-21
CVE-2025-5476 Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability — XAV-AX8500 CWE-653 8.8AI High AI 2025-06-21
CVE-2025-5820 Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability — XAV-AX8500 CWE-288 8.8AI High AI 2025-06-21
CVE-2025-5124 Sony SNC-M1 Administrative Interface default credentials — SNC-M1 CWE-1392 8.1 High 2025-05-24
CVE-2024-23922 Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability — XAV-AX5500 CWE-345 6.8 Medium 2024-09-23
CVE-2024-23972 Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability — XAV-AX5500 CWE-120 6.8 Medium 2024-09-23
CVE-2024-23934 Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability — XAV-AX5500 CWE-121 8.8 High 2024-09-23
CVE-2024-23933 Sony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution Vulnerability — XAV-AX5500 CWE-121 6.8 Medium 2024-09-23
CVE-2022-3349 Sony PS4/PS5 exFAT UVFAT_readupcasetable heap-based overflow — PS4 CWE-119 6.8 Medium 2022-09-28

This page lists every published CVE security advisory associated with Sony. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.