Arbitrary Code Execution in Sonos One Speaker by Vendor Sonos

CVE-2023-27355

What is CVE-2023-27355?

This vulnerability found in the Sonos One Speaker allows remote attackers within the same network to execute arbitrary code due to improper validation of input data length in the MPEG-TS parser. The flaw enables an attacker to copy user-supplied data into a fixed-length stack-based buffer without adequate checks, providing a route to run arbitrary code with root privileges. Exploitation does not require authentication, significantly amplifying the risk posed to users of the affected product.

References