CVE-2024-23933mediumCWE-121

CVE-2024-23933: medium-severity vulnerability in Sony XAV-AX5500

Sony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution Vulnerability

Published · Updated

Follow this CVE+ Monitor XAV-AX5500

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.8%
In short

A flaw in Sony XAV-AX5500's CarPlay feature allows someone with physical access to send specially crafted data that overflows a memory buffer, letting them run malicious code on the device without needing a password.

Technical detail

Stack-based buffer overflow in the Apple CarPlay protocol implementation due to insufficient length validation of TLV-encoded user-supplied data before copying to fixed-size buffer. Physical proximity required; no authentication needed. Successful exploitation results in arbitrary code execution with device privileges.

Summary generated and translated by AI from the official description.
Sony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the Apple CarPlay protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-23238
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Sony · XAV-AX5500
Related CVEs — Sony XAV-AX5500

In the same product, most dangerous first.

CVE-2024-23922MEDIUMSony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-23934HIGHSony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2024-23972MEDIUMSony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%