CVE-2026-18284

Name of the Vulnerable Software and Affected Versions Sony XAV-9500ES (affected versions not specified)

Description A local privilege escalation flaw exists in the crash dump handler. The issue occurs because the system fails to properly validate a user-supplied string before using it in a system call. An attacker who can already execute low-privileged code on the device can exploit this to execute arbitrary code with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.