Skip to content
OpenAdvisories

Vendor

Sony

41 known vulnerabilities.

12 results · Clear filters · Feed

  • Medium 6.3

    Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection

    A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func_set_nnabla_version_decorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of t…

  • Medium 6.3

    Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection

    A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_param.py of the component Encode Param Command Handler. Such manipulation leads to …

  • Medium 6.8

    Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the …

  • Medium 6.7

    Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If this vuln…

  • Medium 5.2

    Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary …

  • Medium 6.7

    Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path. A us…

  • Medium 6.3

    Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability

    Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected Sony XAV-AX8500 devices. Authentication is not required to exploit this vulnerability. …

  • Medium 6.3

    Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability

    Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected Sony XAV-AX8500 devices. Authentication is not required to exploit this vulnerability. The sp…

  • Medium 6.8
    CVE-2024-23922 Public exploit

    Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability

    Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required …

  • Medium 6.8

    Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not requ…

  • Medium 6.8

    Sony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required …

  • Medium 6.8

    Sony PS4/PS5 exFAT UVFAT_readupcasetable heap-based overflow

    A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based buffer overflow. It is possible …