Sony XAV-9500ES CVE-2026-18282

The attacker must be within Bluetooth radio range of the target vehicle (AV:A). The victim user must actively accept or initiate a Bluetooth pairing request with the attacker-controlled device - this is the UI:R requirement and is the primary real-world friction point. The AVRCP exploit payload can only be delivered after a Bluetooth connection is successfully established, meaning pairing must complete before the parser is reachable. No special non-default configuration of the head unit is required beyond Bluetooth being enabled, which is the default operational state. Exploitation is bounded by: (1) mandatory physical proximity within Bluetooth range, (2) mandatory victim interaction to complete device pairing, and (3) specific affected firmware version 3.02.00.

The CVSS 3.0 score of 8.0 (AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) correctly captures the two primary constraints on exploitation: adjacency is restricted to Bluetooth radio range, and user interaction is mandatory because the victim must accept or initiate a pairing request with the attacker's malicious device. The C:H/I:H/A:H impact triad accurately reflects full code execution capability on a successful exploit. No EPSS score was provided in the input data, and there is neither a KEV listing nor any reported POC code, so this is not a confirmed-exploited vulnerability at time of analysis - the absence of EPSS data means exploitation probability cannot be independently quantified. The UI:R requirement is a meaningful real-world friction point: opportunistic, drive-by exploitation is not feasible; an attacker must either be physically near the target vehicle and socially engineer the pairing, or stage a scenario where a victim pairs with an attacker-controlled device. The consumer automotive attack surface further limits population at risk compared to enterprise network software. Firmware patching per the Sony advisory remains the appropriate priority response for device owners.

An attacker within Bluetooth radio range of a vehicle (typically 10-30 meters) presents a malicious device for pairing with the XAV-9500ES. Once the vehicle owner accepts the pairing request, the attacker sends specially crafted AVRCP response packets containing an oversized payload with a manipulated length field. The AVRCP_Br_Response_Parser copies this data into a fixed heap buffer without bounds validation, corrupting adjacent heap memory and enabling an attacker-controlled code execution primitive on the head unit.