Sonos vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20234
3. 20244
4. 20255
5. 20264

Newest CVEs

• CVE-2026-55093

  tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load

  sonos · tract

  Medium6.1
• CVE-2026-55832

  Tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx

  sonos · tract

  Medium6.1
• CVE-2026-75093

  sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size

  sonos · tract

  Medium5.3
• CVE-2026-4149

  Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability

  Sonos · Era 300

  Critical10.0
• CVE-2025-1051

  Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability

  Sonos · Era 300

  High8.8
• CVE-2025-1050

  Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability

  Sonos · Era 300

  High8.8
• CVE-2025-1049

  Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability

  Sonos · Era 300

  High8.8
• CVE-2025-1048

  Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability

  Sonos · Era 300

  High8.8
• CVE-2025-43916

  Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a redirect_uri containing userinfo in the authority component, which…

  Sonos · api.sonos.com

  Low3.4
• CVE-2024-5269

  Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability

  Sonos · Era 100

  High8.8