Vulnerabilities

TI-2026-15037 CVE-2026-18284 · GHSA-3j3v-5mxm-2c69

OS command injection in Sony XAV-9500ES

LOW 38

Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01022 Published 2026-08-20 No fix listed CWE-78

TI-2026-15036 CVE-2026-18283 · GHSA-j2pg-r74g-f5v5

LOW 12

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability.

CVSS 3.0LOW 2.4 Physical No auth No interaction EPSS 0.0027 Published 2026-08-20 No fix listed CWE-285

TI-2026-15035 CVE-2026-18282 · GHSA-h92r-xj8g-2xqw

LOW 37

Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00457 Published 2026-08-20 No fix listed CWE-122

TI-2026-15034 CVE-2026-18281 · GHSA-pv6v-r567-jrcx

LOW 37

Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00457 Published 2026-08-20 No fix listed CWE-122

TI-2026-15033 CVE-2026-18280 · GHSA-jqhr-c9q5-h984

LOW 18

Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability.

CVSS 3.0LOW 3.9 Physical No auth No interaction EPSS 0.00251 Published 2026-08-20 No fix listed CWE-120

TI-2026-15032 CVE-2026-18279 · GHSA-w47w-hvhg-f7v6

MEDIUM 41

Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00686 Published 2026-08-20 No fix listed CWE-120

TI-2026-15031 CVE-2026-18278 · GHSA-vv43-p65q-97r5

LOW 16

Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.0LOW 3.5 Adjacent network No auth User interaction EPSS 0.00244 Published 2026-08-20 No fix listed CWE-125