CVE-2018-16594: Sony r5c Firmware

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal.

Affected products

  • Sony r5c Firmware: before 8.590 (fixed in 8.590)
  • Sony WD65 Firmware: before 8.216 (fixed in 8.216)
  • Sony WD75 Firmware: before 8.216 (fixed in 8.216)
  • Sony WE6 Firmware: before 8.464 (fixed in 8.464)
  • Sony WE75 Firmware: before 8.464 (fixed in 8.464)
  • Sony WF6 Firmware: before 8.464 (fixed in 8.464)
  • Sony XE70 Firmware: before 8.764 (fixed in 8.764)
  • Sony XF70 Firmware: before 8.764 (fixed in 8.764)

Published 2019-06-19. Last modified 2026-06-17.