CVE-2026-18279
Received Received - Intake

Buffer Overflow in Sony XAV-9500ES via RTSP SETUP

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: Zero Day Initiative

Description
Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SETUP RTSP packets. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-29042.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-20
Last Modified
2026-08-20
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
CVE-2026-18279
EUVD
EUVD-2026-63426

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
sony xav-9500es *
sony xav-9500es to 2026-07-29 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a buffer overflow vulnerability in the Sony XAV-9500ES device that allows remote code execution. It occurs when handling RTSP SETUP packets due to insufficient validation of user-supplied data length before copying it to a fixed-length buffer. Attackers on the same network can exploit this without authentication to execute arbitrary code on the device.

Detection Guidance

Detecting this vulnerability requires monitoring network traffic for malformed RTSP SETUP packets targeting Sony XAV-9500ES devices. Use packet capture tools like tcpdump or Wireshark to inspect RTSP traffic for unusually large SETUP packets. Check device logs for crashes or unexpected behavior during RTSP communication.

Impact Analysis

If you own or use a Sony XAV-9500ES device, an attacker on your local network could exploit this to take control of the device, run malicious code, or disrupt its functionality. Since authentication is not required, the risk is significant for unpatched systems.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unauthorized code execution on the device. If exploited, it may lead to unauthorized access to sensitive data processed or stored by the Sony XAV-9500ES, violating data protection requirements under these regulations.

Mitigation Strategies

Immediately apply the official firmware update from Sony to patch the buffer overflow. Isolate affected devices from untrusted networks. Monitor network traffic for signs of exploitation attempts. If updates are unavailable, restrict network access to the device to trusted sources only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18279. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart