A heap‑based buffer overflow exists in the AVRCP_BR_Response parser of Sony XAV‑9500ES devices. The flaw is caused by insufficient validation of the length of user‑supplied data before copying it into a heap buffer. An attacker can exploit this vulnerability to inject and execute arbitrary code in the device’s context. Inferred from the description, the attacker must pair a malicious Bluetooth device with the target, meaning the attack is network‑adjacent with a proximity requirement.

Sony XAV‑9500ES digital media players with the vulnerable firmware are affected. No specific firmware revisions are listed in the advisory, so all current units are potentially at risk until a patched firmware image is released.

The CVSS score of 8 indicates a high severity impact. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed widespread exploitation yet. The vulnerability can be leveraged by adjacent Bluetooth devices that are paired to the target, implying a physical or local proximity requirement for the attacker. If an adversary can establish a Bluetooth pairing, they can trigger the buffer overflow and gain execution privileges on the device.