Log in Start free

Sony

Products

ProductCVEsExploitedLatest
XAV-9500ES7–Aug 20, 2026
XAV-AX85006–Jun 21, 2025
XAV-AX55004–Sep 23, 2024
Neural Network Libraries2–Oct 26, 2026
PS42–Jun 2, 2026
SNC-M11–May 24, 2025
SNC-M31–May 24, 2025
SNC-RX570N1–May 24, 2025
SNC-RZ25N1–May 24, 2025
SNC-RZ30N1–May 24, 2025
SNC-DS101–May 24, 2025
SNC-CS3N1–May 24, 2025
PS51–Sep 28, 2022

Exploited and recent CVEs

  • CVE-2026-116104 Medium 6.3 Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection 0.2%
  • CVE-2026-116103 Medium 6.3 Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection 0.2%
  • CVE-2026-18284 High 7.8 Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability 1.0%
  • CVE-2026-18283 Low 2.4 Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability 0.3%
  • CVE-2026-18282 High 8.0 Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.5%
  • CVE-2026-18281 High 8.0 Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.5%
  • CVE-2026-18280 Low 3.9 Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability 0.3%
  • CVE-2026-18279 High 8.8 Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability 0.7%
  • CVE-2026-18278 Low 3.5 Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability 0.2%
  • CVE-2025-64390 High 7.4 A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J (Blu-ray Disc Java) sandbox can be escaped through a malformed JAR file. <0.1%
  • CVE-2025-5475 High 7.5 Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability 0.3%
  • CVE-2025-5477 High 7.5 Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.4%
  • CVE-2025-5478 High 8.8 Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability 0.4%
  • CVE-2025-5479 High 7.5 Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.4%
  • CVE-2025-5476 Medium 6.3 Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability 0.4%
  • CVE-2025-5820 Medium 6.3 Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability 0.4%
  • CVE-2025-5124 High 8.1 Sony SNC-M1 Administrative Interface default credentials 1.0%
  • CVE-2025-5124 High 8.1 Sony SNC-M1 Administrative Interface default credentials 1.0%
  • CVE-2025-5124 High 8.1 Sony SNC-M1 Administrative Interface default credentials 1.0%
  • CVE-2025-5124 High 8.1 Sony SNC-M1 Administrative Interface default credentials 1.0%
  • CVE-2025-5124 High 8.1 Sony SNC-M1 Administrative Interface default credentials 1.0%
  • CVE-2025-5124 High 8.1 Sony SNC-M1 Administrative Interface default credentials 1.0%
  • CVE-2025-5124 High 8.1 Sony SNC-M1 Administrative Interface default credentials 1.0%
  • CVE-2024-23922 Medium 6.8 Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability 1.8%
  • CVE-2024-23972 Medium 6.8 Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability 0.9%
  • CVE-2024-23934 High 8.8 Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability 1.0%
  • CVE-2024-23933 Medium 6.8 Sony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution Vulnerability 0.8%
  • CVE-2022-3349 Medium 6.8 Sony PS4/PS5 exFAT UVFAT_readupcasetable heap-based overflow 0.6%
  • CVE-2022-3349 Medium 6.8 Sony PS4/PS5 exFAT UVFAT_readupcasetable heap-based overflow 0.6%