CVE-2026-18278

Name of the Vulnerable Software and Affected Versions Sony XAV-9500ES (affected versions not specified)

Description An information disclosure flaw exists in the handling of Bluetooth L2CAP packets. The issue occurs due to improper validation of user-supplied data, leading to an out-of-bounds read where the system reads data past the end of an allocated buffer. A network-adjacent attacker can exploit this by pairing a malicious Bluetooth device with the target system. This flaw can be used in combination with other issues to execute arbitrary code in the context of the device. The vulnerability is located within the prh l2 decode packet() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.