How severe is CVE-2024-5256?

CVE-2024-5256 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over an adjacent network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.

Is CVE-2024-5256 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (34th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-5256?

CVE-2024-5256 affects Sonos Era 100 Firmware. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2024-5256?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2024-5256 have an EU (EUVD) identifier?

Yes. CVE-2024-5256 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-46494.

When was CVE-2024-5256 published?

CVE-2024-5256 was published on 2024-06-06 and last updated on 2026-06-17.

CVE-2024-5256

CVE-2024-5256 is a medium-severity vulnerability in Sonos Era 100 Firmware with a CVSS 3.x base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-191.

Key facts

Severity: Medium (CVSS 3.x base score 4.3)
EPSS exploit prediction: 0% (34th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-46494
Weakness: CWE-191
Affected product: Sonos Era 100 Firmware
Published: 2024-06-06
Last modified: 2026-06-17

Description

Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SMB2 messages. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before reading from memory. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-22336.

Frequently asked questions

What is CVE-2024-5256?: Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SMB2 messages. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before reading from memory. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-22336.
How severe is CVE-2024-5256?: CVE-2024-5256 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over an adjacent network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2024-5256 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (34th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-5256?: CVE-2024-5256 affects Sonos Era 100 Firmware. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-5256?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2024-5256 have an EU (EUVD) identifier?: Yes. CVE-2024-5256 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-46494.
When was CVE-2024-5256 published?: CVE-2024-5256 was published on 2024-06-06 and last updated on 2026-06-17.

References

https://www.zerodayinitiative.com/advisories/ZDI-24-542/

Affected products (1)

cpe:2.3:o:sonos:era_100_firmware:15.9:*:*:*:*:*:*:*

More vulnerabilities in Sonos Era 100 Firmware

CVE-2024-5269 — High (CVSS 8.8): Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2024-5267 — High (CVSS 8.8): Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2024-5268 — Medium (CVSS 6.5): Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows…

All CVEs affecting Sonos Era 100 Firmware →

Other CWE-191 (Integer Underflow) vulnerabilities

CVE-2007-0063 — Critical (CVSS 10.0): Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build…
CVE-2026-53176 — Critical (CVSS 9.8): In the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs shorter than…
CVE-2026-37534 — Critical (CVSS 9.8): Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in…
CVE-2025-52471 — Critical (CVSS 9.8): ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. An integer underflow vulnerability has been…
CVE-2025-29909 — Critical (CVSS 9.8): CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures…
CVE-2024-47606 — Critical (CVSS 9.8): GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in…

Browse all CWE-191 (Integer Underflow) vulnerabilities →