CVE-2024-23963: (Pwn2Own) Alpine Halo9 Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability.
The specific flaw exists within the PBAPDecodeVCARD function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23963?
CVE-2024-23963 has a high severity rating due to its potential for allowing arbitrary code execution.
How do I fix CVE-2024-23963?
To fix CVE-2024-23963, users should update their Alpine Halo9 devices to the latest firmware version provided by the vendor.
Who is affected by CVE-2024-23963?
CVE-2024-23963 affects users of Alpine Halo9 devices that are vulnerable to Bluetooth pairing exploitation.
What type of attacks does CVE-2024-23963 enable?
CVE-2024-23963 enables network-adjacent attackers to execute arbitrary code on affected systems after successful Bluetooth device pairing.
What should I do if I suspect exploitation of CVE-2024-23963?
If exploitation of CVE-2024-23963 is suspected, immediately disconnect Bluetooth devices and contact Alpine support for further assistance.