CVE-2022-23747: Sony Xperia 1 Firmware

Critical severity, CVSS 9.8. EPSS: 10.2% chance of exploitation in the next 30 days.

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.

Affected products

• Sony Xperia 1 Firmware: affected versions not specified
• Sony Xperia 5 Firmware: affected versions not specified
• Sony Xperia Pro Firmware: affected versions not specified

Published 2022-08-17. Last modified 2026-06-17.