Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Sonos — Vulnerabilities & Security Advisories 17

Browse all 17 CVE security advisories affecting Sonos. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Sonos develops wireless multi-room audio systems for home entertainment. Historically, the company's products have faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from web interfaces and mobile applications. Security researchers have identified issues in firmware updates and authentication mechanisms. While no major public security incidents have been widely reported, the 16 documented CVEs highlight ongoing security challenges in IoT audio devices. The company has addressed vulnerabilities through patches, but the interconnected nature of its systems presents a persistent attack surface for potential unauthorized access or device compromise.

CVE ID Title CVSS Severity Published
CVE-2026-75093 sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size — tract CWE-131 4.3 Medium 2026-08-18
CVE-2026-4149 Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability — Era 300 CWE-119 9.8 - 2026-04-11
CVE-2025-1051 Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability — Era 300 CWE-122 8.8AI High AI 2025-06-02
CVE-2025-1050 Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability — Era 300 CWE-787 8.8 - 2025-04-23
CVE-2025-1049 Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability — Era 300 CWE-122 8.8 - 2025-04-23
CVE-2025-1048 Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability — Era 300 CWE-416 8.8 - 2025-04-23
CVE-2025-43916 Sonos api.sonos.com 安全漏洞 — api.sonos.com CWE-647 3.4 Low 2025-04-21
CVE-2024-5269 Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability — Era 100 CWE-416 8.8AI High AI 2024-06-06
CVE-2024-5268 Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability — Era 100 CWE-125 6.5AI Medium AI 2024-06-06
CVE-2024-5267 Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Write Remote Code Execution Vulnerability — Era 100 CWE-787 8.8AI High AI 2024-06-06
CVE-2024-5256 Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability — Era 100 CWE-191 6.5AI Medium AI 2024-06-06
CVE-2023-27355 Sonos One Speaker 安全漏洞 — One Speaker CWE-121 8.8 - 2023-04-20
CVE-2023-27354 One Speaker 输入验证错误漏洞 — One Speaker CWE-190 6.5 - 2023-04-20
CVE-2023-27353 Sonos One Speaker 缓冲区错误漏洞 — One Speaker CWE-125 6.5 - 2023-04-20
CVE-2023-27352 Sonos One Speaker 资源管理错误漏洞 — One Speaker CWE-416 8.8 - 2023-04-20
CVE-2022-24049 Sonos One Speaker 缓冲区错误漏洞 — One Speaker CWE-121 9.8 - 2022-02-18
CVE-2022-24046 Sonos One Speaker 数字错误漏洞 — One Speaker CWE-191 8.8 - 2022-02-18

This page lists every published CVE security advisory associated with Sonos. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.