← Back to feed
advisories Zero Day Initiative

ZDI-26-475: (Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

Zero Day Initiative

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first o...

T1190 1 IOC
Read the full story Zero Day Initiative →

Related Coverage

advisories ISC Stormcast For Thursday, September 24th, 2026 https://isc.sans.edu/podcastdetail/10108, (Thu, Sep 24th) SANS ISC · Sep 24 advisories Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators CISA Advisories · Sep 23 advisories ZDI-26-734: Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability Zero Day Initiative · Sep 23