Alpine iLX-F511 method lets local attackers escalate privileges
Attackers need low-privileged code first; ZDI rates the Pwn2Own zero-day CVSS 7.8.
46
Vendor
Alpine
- Mentions · 7d11
- Mentions · 30d11
- All mentions11
- First seenOct 28, 2026
- Last mentioned2d ago
Timeline
11 articles · newest firstAlpine iLX-F511 zero-day exposes hard-coded SSH credentials for code execution
Network-adjacent attackers need no login; ZDI rates ZDI-26-819 at CVSS 6.3 after a Pwn2Own finding.
52
Alpine iLX-F511 Bluetooth overflow allows adjacent code execution (ZDI-26-823)
ZDI rates the unpatched Pwn2Own flaw 8.0; an attacker must pair a malicious Bluetooth device before overflowing prh_sdp_service_search_decode.
52
Alpine iLX-F511 framework service 0-day allows unauthenticated RCE
Network-adjacent attackers need no login to call an exposed function; ZDI rates it CVSS 8.8.
58
Alpine iLX-F511 Android Auto handler overflow allows code execution
Physically present attackers need no login; ZDI scores the Pwn2Own zero-day at 6.8.
48
Alpine iLX-F511 vCard parser 0-day allows Bluetooth RCE
A network-adjacent attacker needs the unit to connect to a malicious Bluetooth device; ZDI rates it CVSS 8.0.
54
Alpine iLX-F511 Bluetooth OBEX overflow allows unauthenticated code execution
ZDI rates the Pwn2Own zero-day at CVSS 6.8; a physically present attacker needs no authentication.
48
Alpine iLX-F511 Android Auto overflow allows adjacent code execution
ZDI scores the unauthenticated Pwn2Own zero-day at CVSS 8.8 for network-adjacent attackers.
58
Alpine iLX-F511 Bluetooth stack 0-day can leak data
An attacker must first pair a malicious Bluetooth device; ZDI scores the out-of-bounds read CVSS 3.5.
32
Alpine iLX-F511 diagapp 0-day allows local command injection
A physically present attacker needs no authentication; ZDI rates the Pwn2Own flaw CVSS 6.8.
40
Alpine iLX-F511 framework service overflow allows code execution
ZDI rates the unauthenticated, physically triggered flaw 6.8 and labels it a Pwn2Own zero-day.
48
Related CVEs
by mentions- Stack-based buffer overflow RCE in Alpine iLX-F511 Android Auto
- Heap overflow RCE in Alpine iLX-F511 via Bluetooth OBEX
Appears with
- Zero Day Initiativeorganization · 11
- iLX-F511product · 7
- Alpine iLX-F511product · 4
- libanwbtstack.soproduct · 1
- diagappproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.