CVE-2025-1050

Published Apr 23, 2025

Last updated 4 months ago

Sonos

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-1050 is an out-of-bounds write vulnerability found in Sonos Era 300 speakers. It allows a network-adjacent attacker to write data past the end or before the beginning of the intended buffer, potentially impacting confidentiality, integrity, and availability. The vulnerability can be triggered by manipulating an unknown input, leading to the out-of-bounds write. It can be exploited within the local network without authentication. To eliminate this vulnerability, users should upgrade their devices.

Description: Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HLS playlist data. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the anacapa user. Was ZDI-CAN-25606.
Source: zdi-disclosures@trendmicro.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.0

Type: Secondary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

zdi-disclosures@trendmicro.com: CWE-787

Hype score: Not currently trending

References