CVE-2025-1050

Name of the Vulnerable Software and Affected Versions: Sonos Era 300 (affected versions not specified)

Description: This issue allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. The specific flaw exists within the processing of HLS playlist data, resulting from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the anacapa user.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.