CVE-2022-24046

CVE-2022-24046 is a critical vulnerability affecting Sonos One speakers running S2 systems prior to version 3.4.1 and S1 systems prior to 11.2.13 build 57923290. This flaw, an integer underflow in the anacapd daemon, allows unauthenticated, network-adjacent attackers to execute arbitrary code with root privileges. With a CVSS score of 8.8 (HIGH), the vulnerability is easily exploitable due to its low attack complexity and lack of authentication requirements, leading to potential complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the high risk score and potential for remote code execution warrant immediate patching.