CVE-2026-118603: Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.
The specific flaw exists within the parsing of vCard data. The issue results from the lack of proper validation of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-29017.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Affected Alpine iLX-F511 devices are exposed to network-adjacent attackers operating over Bluetooth. Exploitation requires the target user to connect the device to a malicious Bluetooth device.
What access does an attacker need to exploit it?
The attacker does not need prior privileges, but must be able to present a malicious Bluetooth device to the target and induce the target to connect to it. The exploit is triggered through malicious vCard data.
What is the impact if exploitation succeeds?
An attacker can execute arbitrary code in the context of root on the affected device, with high confidentiality, integrity, and availability impact.
What mitigation is available if patching cannot be performed immediately?
The provided information supports reducing exposure by avoiding connections to untrusted Bluetooth devices, since a user connection to a malicious Bluetooth device is required for exploitation.