CVE-2022-24049: (Pwn2Own) Sonos One Speaker ALAC Frame Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems). Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15798.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-24049?
CVE-2022-24049 is a critical vulnerability that allows remote code execution on affected Sonos One Speaker installations.
How do I fix CVE-2022-24049?
To mitigate CVE-2022-24049, update your Sonos One Speaker to at least version 3.4.1 for S2 systems or version 11.2.13 for S1 systems.
Who is affected by CVE-2022-24049?
CVE-2022-24049 affects installations of Sonos One Speaker running versions prior to 3.4.1 (S2) and 11.2.13 (S1).
Is authentication required to exploit CVE-2022-24049?
No, authentication is not required to exploit CVE-2022-24049.
What are the potential consequences of exploiting CVE-2022-24049?
Exploiting CVE-2022-24049 can lead to the execution of arbitrary code on the affected devices, potentially compromising their security.