CVE-2026-118606

A heap-based buffer overflow in Bluetooth OBEX packet handling exists in Alpine iLX-F511 devices, caused by lack of validation of user-supplied data length before copying to a heap buffer. A physically present attacker can execute arbitrary code as root without authentication.

A stack-based buffer overflow in the Android Auto service of Alpine iLX-F511 devices allows remote code execution. The flaw results from lack of validation of user-supplied data length before copying it to a fixed-length stack buffer. A network-adjacent attacker can exploit it without authentication.

A stack-based buffer overflow in the Android Auto connection handler of Alpine iLX-F511 devices allows a physically present attacker to execute arbitrary code. The lack of validation of user-supplied data length before copying to a fixed-length stack buffer enables remote code execution with root privileges.

A command injection vulnerability in the diagapp component of Alpine iLX-F511 devices allows a physically present attacker to execute arbitrary code. The lack of validation of a user-supplied string before using it in a system call enables code execution with root privileges.

A stack-based buffer overflow in the prh_sdp_service_search_decode function of Alpine iLX-F511 devices allows remote code execution. The flaw results from lack of validation of user-supplied data length before copying it to a stack buffer. The attacker must first pair a malicious Bluetooth device with the target.

A stack-based buffer overflow in the framework service of Alpine iLX-F511 devices allows a physically present attacker to execute arbitrary code. The lack of validation of user-supplied data length before copying to a fixed-length stack buffer enables remote code execution with root privileges.

A stack-based buffer overflow in vCard parsing on Alpine iLX-F511 devices allows remote code execution. The flaw results from lack of validation of user-supplied data before copying it to a fixed-length stack buffer. User interaction is required — the target must connect to a malicious Bluetooth device.

An exposed dangerous method in the Fiv service of Alpine iLX-F511 devices allows local privilege escalation. The attacker must first obtain the ability to execute low-privileged code. Exploitation allows executing code as root.

A hard-coded credentials vulnerability in the SSH service of Alpine iLX-F511 devices allows a network-adjacent attacker to execute arbitrary code. No authentication is required, enabling code execution with telechips user privileges.