SecAlerts
s

sony

Security Risk Profile

51
/100
medium

Security Risk Score

Comprehensive risk assessment based on 130 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from December 31, 2002 to present

130
Total CVEs
74
Critical+High
9
Exploited
62
Unpatched

Threat Assessment

Avg CVSS
7.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
62
Critical/High
Risk Level
51/100
medium
⚠️ 9 Active Exploits 5 Zero-Days

Severity Distribution

Critical
20
High
54
Medium
35
Low
10

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
7

Age Distribution

Common Weaknesses (CWE)

1
Buffer Overflow
21
2
Integer Overflow
6
3
OS Command Injection
4
4
Command Injection
3
5
CSRF
2

Most Affected Products

1. Sony XAV-9500ES38
2. Sony XAV-AX550014
3. Sony SonicStage Mastering Studio13
4. Sony Playstation Portable11
5. Sony Xav-ax850010

Recent Vulnerabilities

See more →
ZDI-26-475
CVSS 8.0high

(Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-28995
CVSS 8.0high

ZDI-26-475: (Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-26-474
CVSS 8.0high

(Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-29072
CVSS 8.0high

ZDI-26-474: (Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-26-477
CVSS 7.8high

(Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-29061
CVSS 7.8high

ZDI-26-477: (Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-29042
CVSS 8.8high

ZDI-26-472: (Pwn2Own) Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-26-472
CVSS 8.8high

(Pwn2Own) Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-26-476
CVSS 2.4low

(Pwn2Own) Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability

Jul 29, 2026🔧 No Patch
ZDI-CAN-28992
CVSS 2.4low

ZDI-26-476: (Pwn2Own) Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability

Jul 29, 2026🔧 No Patch

Monitor sony in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.