Vulnerabilities in Sony

13 results
Vexday analysis

A Sony apresenta 13 vulnerabilidades registradas na base, com apenas 1 crítica e nenhuma sob exploração ativa conhecida, reduzindo o risco imediato de ataque. A fraqueza dominante é stack-based buffer overflow (CWE-121), um padrão clássico que demanda validação rigorosa de entrada. Com apenas 1 vulnerabilidade publicada nos últimos 90 dias, o panorama sugere um ritmo moderado de descobertas e correções.

CVE-2024-23922MEDIUMSony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-23934HIGHSony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-5124CRITICALSony SNC-M1 Administrative Interface default credentialsEPSS 0.9%CVE-2024-23972MEDIUMSony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-23933MEDIUMSony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2022-3349MEDIUMSony PS4/PS5 exFAT UVFAT_readupcasetable heap-based overflowEPSS 0.5%CVE-2025-5478HIGHSony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-5477HIGHSony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-5479HIGHSony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-5476MEDIUMSony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass VulnerabilityEPSS 0.3%CVE-2025-5820MEDIUMSony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass VulnerabilityEPSS 0.3%CVE-2025-5475HIGHSony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-64390HIGHA privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J (Blu-ray Disc Java) sandbox canEPSS 0.1%