ZDI-24-876: (Pwn2Own) Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the USB host driver. A crafted USB configuration descriptor can trigger an overflow of a fixed-length buffer. An attacker can leverage this vulnerability to execute code in the context of the device.
Other sources
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2024-23972.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-876?
The severity of ZDI-24-876 is considered critical due to the potential for arbitrary code execution.
What devices are affected by ZDI-24-876?
ZDI-24-876 specifically affects Sony XAV-AX5500 devices.
What can attackers achieve by exploiting ZDI-24-876?
By exploiting ZDI-24-876, physically present attackers can execute arbitrary code on the affected devices.
Is authentication required to exploit ZDI-24-876?
No, authentication is not required to exploit the ZDI-24-876 vulnerability.
How do I mitigate ZDI-24-876?
Mitigating ZDI-24-876 involves applying the latest firmware updates provided by Sony for the XAV-AX5500 device.