Sonos

Products

Exploited and recent CVEs

• CVE-2026-55093 Medium 6.1 tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load 0.2%
• CVE-2026-55832 Medium 6.1 Tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx 0.2%
• CVE-2026-75093 Medium 4.3 sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size 0.6%
• CVE-2026-4149 Critical 10.0 Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability 1.0%
• CVE-2025-1051 High 8.8 Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.4%
• CVE-2025-1050 High 8.8 Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability 0.4%
• CVE-2025-1049 High 8.8 Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.4%
• CVE-2025-1048 High 8.8 Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability 0.5%
• CVE-2025-43916 Low 3.4 Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a redirect_uri containing userinfo in the authority component, which is not consistent with RFC 6819 section 0.2%
• CVE-2024-5269 High 8.8 Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability 1.2%
• CVE-2024-5268 Medium 4.3 Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability 0.5%
• CVE-2024-5267 High 8.8 Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Write Remote Code Execution Vulnerability 0.7%
• CVE-2024-5256 Medium 4.3 Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability 0.4%
• CVE-2023-27352 High 8.8 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. 0.8%
• CVE-2023-27355 High 8.8 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. 0.8%
• CVE-2023-27353 Medium 5.4 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnera 0.6%
• CVE-2023-27354 Medium 5.4 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnera 0.6%
• CVE-2022-24049 Critical 9.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems). Authentication 7.2%
• CVE-2022-24046 Critical 9.8 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems). Authe 4.1%