Buffer Overflow in Sony XAV-AX5500 USB Configuration Descriptor

CVE-2024-23972

What is CVE-2024-23972?

A vulnerability exists within the USB host driver of Sony XAV-AX5500 devices, where a specially crafted USB configuration descriptor can lead to a buffer overflow. This flaw enables local attackers to execute arbitrary code on the device without requiring authentication. Targeted exploitation can allow the attacker to operate within the context of the device, raising significant security concerns.

References