What is the severity of CVE-2018-16595?

CVE-2018-16595 is classified as a high severity vulnerability due to its potential for causing a buffer overflow.

How do I fix CVE-2018-16595?

The vulnerability can be mitigated by updating the Sony Bravia TV firmware to a version above 8.590 for R5C and 8.216 for WD series.

Which devices are affected by CVE-2018-16595?

CVE-2018-16595 affects Sony Bravia TVs that are running the Photo Sharing Plus component under specific firmware versions.

What is a buffer overflow as seen in CVE-2018-16595?

A buffer overflow occurs when data exceeds the buffer's storage capacity, potentially allowing attackers to execute arbitrary code.

Is CVE-2018-16595 being actively exploited?

As of now, there have been no confirmed reports of active exploitation of CVE-2018-16595 in the wild.

Vulnerability/
CVE-2018-16595

medium

6.5

CWE

119

19/6/2019

5/8/2024

CVE-2018-16595: Buffer Overflow

First published: Wed Jun 19 2019(Updated: )

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Sony R5c Firmware	<8.590
Sony KDL-32R500C
Sony KDL-32R503C
Sony KDL-32R505C
Sony KDL-40R550C
Sony KDL-40R553C
Sony KDL-40R555C
Sony KDL-48R550C
Sony KDL-48R553C
Sony KDL-48R555C
Sony Wd75 Firmware	<8.216
Sony KDL-32WD750
Sony KDL-32WD751
Sony KDL-32WD752
Sony KDL-32WD753
Sony KDL-32WD754
Sony KDL-32WD755
Sony KDL-32WD756
Sony KDL-32WD757
Sony KDL-32WD758
Sony KDL-32WD759
Sony KDL-43WD750
Sony KDL-43WD751
Sony KDL-43WD752
Sony KDL-43WD753
Sony KDL-43WD754
Sony KDL-43WD755
Sony Kdl-43wd756
Sony KDL-43WD757
Sony KDL-43WD758
Sony KDL-43WD759
Sony KDL-49WD750
Sony KDL-49WD751
Sony KDL-49WD752
Sony KDL-49WD753
Sony KDL-49WD754
Sony KDL-49WD755
Sony KDL-49WD756
Sony KDL-49WD757
Sony KDL-49WD758
Sony KDL-49WD759
Sony Wd65 Firmware	<8.216
Sony KDL-40WD650
Sony KDL-40WD653
Sony KDL-40WD655
Sony KDL-48WD650
Sony KDL-48WD653
Sony KDL-48WD655
Sony Xe70 Firmware	<8.764
Sony KD-43XE7000
Sony KD-43XE7002
Sony KD-43XE7003
Sony KD-43XE7004
Sony KD-43XE7005
Sony KD-43XE7073
Sony KD-43XE7077
Sony KD-43XE7093
Sony KD-43XE7096
Sony KD-49XE7000
Sony KD-49XE7002
Sony KD-49XE7003
Sony KD-49XE7004
Sony Kd-49xe7005
Sony KD-49XE7073
Sony Kd-49xe7077
Sony KD-49XE7093
Sony KD-49XE7096
Sony KD-55XE7000
Sony KD-55XE7002
Sony KD-55XE7003
Sony Kd-55xe7004
Sony KD-55XE7005
Sony KD-55XE7073
Sony KD-55XE7077
Sony KD-55XE7093
Sony KD-55XE7096
Sony KD-65XE7002
Sony Kd-65xe7003
Sony KD-65XE7004
Sony KD-65XE7005
Sony Kd-65xe7093
Sony KD-65XE7096
Sony XF70 Firmware	<8.764
Sony XF70 Firmware
Sony We75 Firmware	<8.464
Sony KDL-43WE750
Sony KDL-43WE753
Sony KDL-43WE754
Sony KDL-43WE755
Sony KDL-49WE750
Sony KDL-49WE753
Sony KDL-49WE754
Sony KDL-49WE755
Sony We6 Firmware	<8.464
Sony KDL-32WE610
Sony KDL-32WE613
Sony Kdl-32we615
Sony KDL-40WE660
Sony KDL-40WE663
Sony KDL-40WE665
Sony KDL-49WE660
Sony Kdl-49we663
Sony KDL-49WE665
Sony WF-600	<8.464
Sony WF-600

Remedy

https://www.sony.co.uk/electronics/support/articles/00201041

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2018-16595?
CVE-2018-16595 is classified as a high severity vulnerability due to its potential for causing a buffer overflow.
How do I fix CVE-2018-16595?
The vulnerability can be mitigated by updating the Sony Bravia TV firmware to a version above 8.590 for R5C and 8.216 for WD series.
Which devices are affected by CVE-2018-16595?
CVE-2018-16595 affects Sony Bravia TVs that are running the Photo Sharing Plus component under specific firmware versions.
What is a buffer overflow as seen in CVE-2018-16595?
A buffer overflow occurs when data exceeds the buffer's storage capacity, potentially allowing attackers to execute arbitrary code.
Is CVE-2018-16595 being actively exploited?
As of now, there have been no confirmed reports of active exploitation of CVE-2018-16595 in the wild.