CVE-2018-16595

EPSS 0.14%
Veröffentlicht 19.06.2019 19:15:10
Zuletzt bearbeitet 21.11.2024 03:53:01
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sony ≫ R5c Firmware Version < 8.590

   Sony ≫ Kdl-32r500c Version-
   Sony ≫ Kdl-32r503c Version-
   Sony ≫ Kdl-32r505c Version-
   Sony ≫ Kdl-40r550c Version-
   Sony ≫ Kdl-40r553c Version-
   Sony ≫ Kdl-40r555c Version-
   Sony ≫ Kdl-48r550c Version-
   Sony ≫ Kdl-48r553c Version-
   Sony ≫ Kdl-48r555c Version-

Sony ≫ Wd75 Firmware Version < 8.216

   Sony ≫ Kdl-32wd750 Version-
   Sony ≫ Kdl-32wd751 Version-
   Sony ≫ Kdl-32wd752 Version-
   Sony ≫ Kdl-32wd753 Version-
   Sony ≫ Kdl-32wd754 Version-
   Sony ≫ Kdl-32wd755 Version-
   Sony ≫ Kdl-32wd756 Version-
   Sony ≫ Kdl-32wd757 Version-
   Sony ≫ Kdl-32wd758 Version-
   Sony ≫ Kdl-32wd759 Version-
   Sony ≫ Kdl-43wd750 Version-
   Sony ≫ Kdl-43wd751 Version-
   Sony ≫ Kdl-43wd752 Version-
   Sony ≫ Kdl-43wd753 Version-
   Sony ≫ Kdl-43wd754 Version-
   Sony ≫ Kdl-43wd755 Version-
   Sony ≫ Kdl-43wd756 Version-
   Sony ≫ Kdl-43wd757 Version-
   Sony ≫ Kdl-43wd758 Version-
   Sony ≫ Kdl-43wd759 Version-
   Sony ≫ Kdl-49wd750 Version-
   Sony ≫ Kdl-49wd751 Version-
   Sony ≫ Kdl-49wd752 Version-
   Sony ≫ Kdl-49wd753 Version-
   Sony ≫ Kdl-49wd754 Version-
   Sony ≫ Kdl-49wd755 Version-
   Sony ≫ Kdl-49wd756 Version-
   Sony ≫ Kdl-49wd757 Version-
   Sony ≫ Kdl-49wd758 Version-
   Sony ≫ Kdl-49wd759 Version-

Sony ≫ Wd65 Firmware Version < 8.216

   Sony ≫ Kdl-40wd650 Version-
   Sony ≫ Kdl-40wd653 Version-
   Sony ≫ Kdl-40wd655 Version-
   Sony ≫ Kdl-48wd650 Version-
   Sony ≫ Kdl-48wd653 Version-
   Sony ≫ Kdl-48wd655 Version-

Sony ≫ Xe70 Firmware Version < 8.764

   Sony ≫ Kd-43xe7000 Version-
   Sony ≫ Kd-43xe7002 Version-
   Sony ≫ Kd-43xe7003 Version-
   Sony ≫ Kd-43xe7004 Version-
   Sony ≫ Kd-43xe7005 Version-
   Sony ≫ Kd-43xe7073 Version-
   Sony ≫ Kd-43xe7077 Version-
   Sony ≫ Kd-43xe7093 Version-
   Sony ≫ Kd-43xe7096 Version-
   Sony ≫ Kd-49xe7000 Version-
   Sony ≫ Kd-49xe7002 Version-
   Sony ≫ Kd-49xe7003 Version-
   Sony ≫ Kd-49xe7004 Version-
   Sony ≫ Kd-49xe7005 Version-
   Sony ≫ Kd-49xe7073 Version-
   Sony ≫ Kd-49xe7077 Version-
   Sony ≫ Kd-49xe7093 Version-
   Sony ≫ Kd-49xe7096 Version-
   Sony ≫ Kd-55xe7000 Version-
   Sony ≫ Kd-55xe7002 Version-
   Sony ≫ Kd-55xe7003 Version-
   Sony ≫ Kd-55xe7004 Version-
   Sony ≫ Kd-55xe7005 Version-
   Sony ≫ Kd-55xe7073 Version-
   Sony ≫ Kd-55xe7077 Version-
   Sony ≫ Kd-55xe7093 Version-
   Sony ≫ Kd-55xe7096 Version-
   Sony ≫ Kd-65xe7002 Version-
   Sony ≫ Kd-65xe7003 Version-
   Sony ≫ Kd-65xe7004 Version-
   Sony ≫ Kd-65xe7005 Version-
   Sony ≫ Kd-65xe7093 Version-
   Sony ≫ Kd-65xe7096 Version-

Sony ≫ Xf70 Firmware Version < 8.764

Sony ≫ Xf70 Version-

Sony ≫ We75 Firmware Version < 8.464

   Sony ≫ Kdl-43we750 Version-
   Sony ≫ Kdl-43we753 Version-
   Sony ≫ Kdl-43we754 Version-
   Sony ≫ Kdl-43we755 Version-
   Sony ≫ Kdl-49we750 Version-
   Sony ≫ Kdl-49we753 Version-
   Sony ≫ Kdl-49we754 Version-
   Sony ≫ Kdl-49we755 Version-

Sony ≫ We6 Firmware Version < 8.464

   Sony ≫ Kdl-32we610 Version-
   Sony ≫ Kdl-32we613 Version-
   Sony ≫ Kdl-32we615 Version-
   Sony ≫ Kdl-40we660 Version-
   Sony ≫ Kdl-40we663 Version-
   Sony ≫ Kdl-40we665 Version-
   Sony ≫ Kdl-49we660 Version-
   Sony ≫ Kdl-49we663 Version-
   Sony ≫ Kdl-49we665 Version-

Sony ≫ Wf6 Firmware Version < 8.464

Sony ≫ Wf6 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.14%	0.301

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	3.3	6.5	2.9	AV:A/AC:L/Au:N/C:N/I:N/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://fortiguard.com/zeroday/FG-VD-18-036

Third Party Advisory

https://www.sony.co.uk/electronics/support/articles/00201041

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-16595

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-16595

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-16595

EUVD