ZDI-26-473
LOW 3.9
Published
Jul 29, 2026
Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability
Sony
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 3.9.