Alpine iLX-F511 Bluetooth overflow allows adjacent code execution (ZDI-26-823)
Original title: ZDI-26-823: (0Day) (Pwn2Own) Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI rates the unpatched Pwn2Own flaw 8.0; an attacker must pair a malicious Bluetooth device before overflowing prh_sdp_service_search_decode.
ZDI published ZDI-26-823, a stack-based buffer overflow in the prh_sdp_service_search_decode function on Alpine iLX-F511 devices. The advisory labels it a Pwn2Own zero-day and says network-adjacent attackers can run arbitrary code after pairing a malicious Bluetooth device. No affected build, fix, or CVE appears in the notice.
Unconfirmed: The notice does not say whether a patch exists or whether the flaw is exploited outside Pwn2Own.
- ZDI assigned CVSS 8.0.
- Exploitation requires a paired malicious Bluetooth device.
- The flaw is in prh_sdp_service_search_decode.
- The advisory marks it (0Day) and (Pwn2Own).
Impact: Arbitrary code execution on the head unit
| Product | Affected |
|---|---|
| Alpine iLX-F511 | — |
- Vendors
- Alpine
- Products
- iLX-F511
- Organizations
- Zero Day Initiative
From the original article
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.