Sonos vulnerabilities

Products

• S2 10
• S1 8
• One Speaker 6
• Era 300 5
• One Firmware 5
• Era 100 4
• Era 100 Firmware 4
• Tract 3
• Era 100 2
• Era 300 Firmware 2
• Firmware 2

Newest

• sonos tract sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size CVE-2026-75093 5.3 MediumAugust 18, 2026
• sonos tract Tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx CVE-2026-55832 Fix available 6.1 MediumJune 19, 2026
• sonos tract tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load CVE-2026-55093 Fix available 6.1 MediumJune 18, 2026
• sonos era 300, era 300 firmware +1 more Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability CVE-2026-4149 10.0 CriticalApril 11, 2026
• sonos era 300, era 300 firmware +1 more Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-1051 8.8 HighJune 2, 2025
• sonos era 300, s2 +1 more Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability CVE-2025-1050 8.8 HighApril 23, 2025
• sonos era 300, s1, s2 +2 more Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-1049 8.8 HighApril 23, 2025
• sonos era 300, s1, s2 +2 more Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability CVE-2025-1048 8.8 HighApril 23, 2025
• sonos api.sonos.com Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a... CVE-2025-43916 3.4 LowApril 21, 2025
• sonos firmware In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability... CVE-2023-50810 6.0 MediumAugust 9, 2024
• sonos s2 In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt_7615.ko wireless... CVE-2023-50809 7.8 HighAugust 9, 2024
• sonos era 100, era 100 firmware +1 more Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability CVE-2024-5269 8.8 HighJune 6, 2024
• sonos era 100, era 100 firmware +1 more Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2024-5268 4.3 MediumJune 6, 2024
• sonos era 100, era 100 firmware +1 more Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Write Remote Code Execution Vulnerability CVE-2024-5267 8.8 HighJune 6, 2024
• sonos era 100, era 100 firmware +1 more Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability CVE-2024-5256 4.3 MediumJune 6, 2024
• sonos one speaker, one firmware, s1 +1 more +3 more This vulnerability allows network-adjacent attackers to execute arbitrary code on affected... CVE-2023-27355 8.8 HighApril 20, 2023
• sonos one speaker, one firmware, s1 +1 more +3 more This vulnerability allows network-adjacent attackers to disclose sensitive information on... CVE-2023-27354 5.4 MediumApril 20, 2023
• sonos one speaker, one firmware, s1 +1 more +3 more This vulnerability allows network-adjacent attackers to disclose sensitive information on... CVE-2023-27353 5.4 MediumApril 20, 2023
• sonos one speaker, one firmware, s1 +1 more +3 more This vulnerability allows network-adjacent attackers to execute arbitrary code on affected... CVE-2023-27352 8.8 HighApril 20, 2023
• sonos one firmware Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via... CVE-2020-9285 6.8 MediumOctober 20, 2022
• sonos one speaker, s1, s2 +2 more This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-24049 9.8 CriticalFebruary 18, 2022
• sonos one speaker, s1, s2 +2 more This vulnerability allows network-adjacent attackers to execute arbitrary code on affected... CVE-2022-24046 9.8 CriticalFebruary 18, 2022
• sonos firmware The UPnP HTTP server on Sonos wireless speaker products allow unauthorized access via a DNS... CVE-2018-11316 9.6 CriticalJuly 3, 2018