CVE-2026-118608: Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability
Alpine iLX-F511 libanwbtstack.so prhrfcommccprocesstest Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability.
The specific flaw exists within the prhrfcommccprocesstest function. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-29018.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Affected Alpine iLX-F511 devices are exposed to network-adjacent attackers who can pair a malicious Bluetooth device with the target system. The issue is not described as remotely exploitable without that Bluetooth pairing capability.
What does an attacker need to exploit the vulnerability?
The attacker must first obtain the ability to pair a malicious Bluetooth device with the target system and then provide crafted data that reaches the prh_rfcomm_cc_process_test function. No prior privileges are identified in the supplied severity vector, but user interaction is required.
What is the practical impact?
The immediate impact is disclosure of sensitive information through an out-of-bounds read. The issue may be combined with other vulnerabilities to achieve arbitrary code execution in the context of root.