Buffer Size Calculation Vulnerability in Sonos Tract by Sonos
CVE-2026-75093

5.3MEDIUM

Key Information:

Vendor

Sonos

Status
Tract
Vendor
CVE Published:
18 August 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-75093?

A vulnerability has been identified in Sonos Tract versions up to 0.23.4, specifically within the Tensor::from_raw_dt_align function in the ONNX Initializer Loader. This flaw allows for remote exploitation through manipulation resulting in incorrect buffer size calculations. The vulnerability has been publicly disclosed and is accompanied by a patch (commit 66b10bda8895f4bfaf8c205361f0125cdf51f99b), which is highly advisable to apply in order to safeguard the affected system.

Affected Version(s)

tract 0.23.0

tract 0.23.1

tract 0.23.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-75093 - Proof of Concept

References

https://vuldb.com/vuln/391335
vdb-entrytechnical-description
https://vuldb.com/vuln/391335/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-75093
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

m00dy (VulDB User)
.