CVE-2023-50809
HIGHSonos <S1 Release 11.12 & S2 release 15.9 - Buffer Overflow
Title source: llmDescription
In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt_7615.ko wireless driver does not properly validate an information element during negotiation of a WPA2 four-way handshake. This lack of validation leads to a stack buffer overflow. This can result in remote code execution within the kernel. This affects Amp, Arc, Arc SL, Beam, Beam Gen 2, Beam SL, and Five.
References (1)
Core 1
Core References
Various Sources
https://www.sonos.com/en-us/security-advisory-2024-0001
Scores
CVSS v3
7.8
EPSS
0.0039
EPSS Percentile
31.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-121
Status
published
Published
Aug 12, 2024
Tracked Since
Feb 18, 2026