SecAlerts
s

sony

Security Risk Profile

52
/100
medium

Security Risk Score

Comprehensive risk assessment based on 132 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from December 31, 2002 to present

132
Total CVEs
74
Critical+High
9
Exploited
62
Unpatched

Threat Assessment

Avg CVSS
7.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
62
Critical/High
Risk Level
52/100
medium
⚠️ 9 Active Exploits⚡ 5 Zero-Days📈 2 in Last 30 Days

Severity Distribution

Critical
20
High
54
Medium
35
Low
12

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
7

Age Distribution

Common Weaknesses (CWE)

1
Buffer Overflow
21
2
Integer Overflow
6
3
OS Command Injection
4
4
Code Injection
3
5
Command Injection
3

Most Affected Products

1. Sony XAV-9500ES38
2. Sony XAV-AX550014
3. Sony SonicStage Mastering Studio13
4. Sony Playstation Portable11
5. Sony Xav-ax850010

Recent Vulnerabilities

See more →
CVE-2026-116104
CVSS 2.1low

Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection

Oct 26, 2026🔧 No Patch
CVE-2026-116103
CVSS 2.1low

Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection

Oct 26, 2026🔧 No Patch
ZDI-26-475
CVSS 8.0high

(Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-28995
CVSS 8.0high

ZDI-26-475: (Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-26-474
CVSS 8.0high

(Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-29072
CVSS 8.0high

ZDI-26-474: (Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-26-477
CVSS 7.8high

(Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-29061
CVSS 7.8high

ZDI-26-477: (Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-29042
CVSS 8.8high

ZDI-26-472: (Pwn2Own) Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-26-472
CVSS 8.8high

(Pwn2Own) Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability

Jul 29, 2026🔧 No Patch

Monitor sony in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

sony Security Vulnerabilities & Risk Score | 132 CVEs | SecAlerts - SecAlerts