Sony

Records91All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high44CVSS 7.0–8.9

Exploited now

Sony records in CISA KEV

No Sony vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records in Xav-ax8500 Firmware · all components

TI-2025-04919 CVE-2025-5478 · GHSA-xgfx-jr44-636c

MEDIUM 40

Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00421 Published 2025-06-21 No fix listed CWE-190

TI-2025-05248 CVE-2025-5820 · GHSA-m84m-25cj-px8x

LOW 38

Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00358 Published 2025-06-21 No fix listed CWE-288

TI-2025-04917 CVE-2025-5476 · GHSA-p5gp-jv8c-qr96

LOW 38

Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00364 Published 2025-06-21 No fix listed CWE-653

TI-2025-04920 CVE-2025-5479 · GHSA-2cg6-37pg-6m3r

LOW 35

Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00377 Published 2025-06-21 No fix listed CWE-122

TI-2025-04918 CVE-2025-5477 · GHSA-g2j4-v7hf-2xq4

LOW 35

Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00377 Published 2025-06-21 No fix listed CWE-122

TI-2025-04916 CVE-2025-5475 · GHSA-jvv2-77hm-qf8r

LOW 35

Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00342 Published 2025-06-21 No fix listed CWE-190