The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoNews
Sony Patches Seven XAV-9500ES Flaws That Could Have Enabled Device Compromise
- Published
- Record updated
Summary
Sony released firmware version 3.04.00 for the XAV-9500ES in-vehicle infotainment system, addressing seven vulnerabilities in its Bluetooth, Wi-Fi and USB functions. The flaws, CVE-2026-18278 through CVE-2026-18284, were found during Pwn2Own Automotive 2026 and disclosed by TrendAI Zero Day Initiative on July 29, 2026. The most severe, CVE-2026-18279 (CVSS 8.8), is an RTSP SETUP buffer overflow that requires no pairing, authentication or user interaction.
Mitigation
Sony firmware version 3.04.00 for the XAV-9500ES addresses these vulnerabilities.