Sonos

Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on th…

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit.

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit.

A security vulnerability has been detected in sonos tract up to 0.23.4.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems).

Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability.

Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a redirect_uri containing userinfo in the authority component, which is not consistent with RFC 6819 section 5.2.3.5.

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems).

The UPnP HTTP server on Sonos wireless speaker products allow unauthorized access via a DNS rebinding attack.

Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability.

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220.

Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability.

Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Write Remote Code Execution Vulnerability.

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220.

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability.

Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability.

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability.

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220.

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220.

Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability.

Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability.