What is the CVSS score of CVE-2025-5479?

CVE-2025-5479 has a CVSS 3.0 base score of 7.5 (High). CVSS vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Xav Ax8500 Firmware are affected by CVE-2025-5479?

Sony XAV-AX8500 in-vehicle infotainment systems are vulnerable to remote code execution if an attacker can pair a malicious Bluetooth device, potentially compromising vehicle safety systems and user…. A patch is available.

How to fix or mitigate CVE-2025-5479?

Within 24 hours: Identify all Sony XAV-AX8500 devices in your environment and document their locations and criticality. Within 7 days: Apply the available vendor patch to all affected devices, prioritizing fleet vehicles and high-use systems. Within 30 days: Verify patch deployment across all systems, update device inventory records, and consider implementing Bluetooth pairing restrictions or monitoring where operationally feasible.

Xav Ax8500 Firmware CVE-2025-5479

EUVD-2025-18882 HIGH

Heap-based Buffer Overflow (CWE-122)

2025-06-21 zdi-disclosures@trendmicro.com

RCE Buffer Overflow Xav Ax8500 Firmware

7.5

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 21:35 euvd

EUVD-2025-18882

Analysis Generated

Mar 15, 2026 - 21:35 vuln.today

Patch released

Mar 15, 2026 - 21:35 nvd

Patch available

CVE Published

Jun 21, 2025 - 01:15 nvd

HIGH 7.5

DescriptionCVE.org

Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability.

The specific flaw exists within the implementation of the Bluetooth AVCTP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26290.

AnalysisAI

A remote code execution vulnerability (CVSS 7.5) that allows network-adjacent attackers. High severity vulnerability requiring prompt remediation. Vendor patch is available.