Buffer Overflow Vulnerability in Sony XAV-AX5500 Device
CVE-2024-23934

8.8HIGH

Key Information:

Vendor

Sony

Status
Xav-ax5500
Vendor
CVE Published:
23 September 2024

What is CVE-2024-23934?

The Sony XAV-AX5500 is susceptible to a stack-based buffer overflow vulnerability due to flaws in the parsing of WMV/ASF files. This security issue allows remote attackers, by crafting a malicious WMV media file with a specially designed Extended Content Description Object, to exploit the overflow of a fixed-length stack-based buffer. Users must engage with the malicious content, either by visiting a malicious page or opening a harmful file, for the attack to be successful. This vulnerability could potentially enable the execution of arbitrary code within the context of the device, posing a significant risk to user security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

XAV-AX5500 1.13

References

https://www.zerodayinitiative.com/advisories/ZDI-24-875/
x_research-advisory
https://www.sony.com/electronics/support/mobile-cd-player...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.