Heap-Based Buffer Overflow Vulnerability in Sonos Era 300 Speakers

CVE-2025-1049

What is CVE-2025-1049?

The Sonos Era 300 speakers have a vulnerability that allows network-adjacent attackers to execute arbitrary code without any authentication. The flaw stems from improper validation of user-supplied data length during ID3 data processing, leading to a heap-based buffer overflow. By exploiting this weakness, an attacker could execute code within the context of the anacapa user, raising significant security concerns for affected devices.

References