CVE-2025-5477

Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the implementation of the Bluetooth L2CAP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the elysian-bt-service process. Was ZDI-CAN-26286.

• CWE-122

• https://www.sony.com/electronics/support/mobile-cd-players-digital-media-players-xav-series/xav-ax8500/software/00344092Patch
• https://www.zerodayinitiative.com/advisories/ZDI-25-354/Third Party Advisory

Published

Jun 21, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-54764Mbed TLS before 3.6.5 allows a local timing attack against c…6.2
• CVE-2025-54765An API endpoint that should be limited to web application ad…5.3
• CVE-2025-54766An API endpoint that should be limited to web application ad…5.3
• CVE-2025-54767An authenticated, read-only user can kill any processes runn…6.5
• CVE-2025-54768An API endpoint that should be limited to web application ad…5.3
• CVE-2025-54769An authenticated, read-only user can upload a file and perfo…8.8
• CVE-2025-54770A vulnerability has been identified in the GRUB2 bootloader'…4.9
• CVE-2025-54771A use-after-free vulnerability has been identified in the GN…4.9
• CVE-2025-54777Uncaught exception issue exists in Multiple products in bizh…5.3
• CVE-2025-54778A reflected cross-site scripting (xss) vulnerability exists …5.4
• CVE-2025-5478Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remo…8.8
• CVE-2025-54780The glpi-screenshot-plugin allows users to take screenshots …7.7