Alpine iLX-F511 Android Auto overflow allows adjacent code execution
ZDI scores the unauthenticated Pwn2Own zero-day at CVSS 8.8 for network-adjacent attackers.
58
Vulnerability1 · 1 read
CVE-2026-118610
Stack-based buffer overflow RCE in Alpine iLX-F511 Android Auto
- CVSS 3.0
- 8.8 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A network-adjacent attacker can trigger this without authentication or user interaction and run arbitrary code as root. Installations of this Alpine device are affected; affected builds and a fixed version are not stated.
What to do: Apply Alpine's update for CVE-2026-118610. No workaround is stated.
| Product | Affected |
|---|---|
| Alpine iLX-F511 | — |
Estimated exposure
nicheNo basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Android Auto service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-29015.
- Weakness
- CWE-121
- Vector
- CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H