Sonos Era 300 Heap-Based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow vulnerability allowing remote code execution has been identified in the Sonos Era 300 speaker. This issue arises from improper validation of user-supplied data length in the processing of ALAC data, leading to arbitrary code execution in the context of the anacapa user. The vulnerability can be exploited by network-adjacent attackers without authentication.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device, with the executed code running under the anacapa user context.

Remediation

Users can update to Sonos Player version 83.1-61240 or Sonos Release version 16.6 to address this vulnerability.