CVE-2025-1049

Summary

CVE-2025-1049 is a critical vulnerability affecting Sonos Era 300 speakers. This heap-based buffer overflow issue allows remote code execution, enabling network-adjacent attackers to execute arbitrary code on the affected devices without requiring authentication. The root cause of this vulnerability lies in the processing of ID3 data, where user-supplied data is not properly validated before being copied to a heap-based buffer. An attacker can successfully exploit this flaw to execute code in the context of the anacapa user. This vulnerability was discovered and reported by ZDI as ZDI-CAN-25601.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.