Remote Code Execution Vulnerability in Alpine Halo9 Devices

CVE-2024-23935

What is CVE-2024-23935?

The vulnerability within Alpine Halo9 devices stems from a stack-based buffer overflow in the DecodeUTF7 function. This flaw occurs due to insufficient validation of user-supplied data lengths before copying to a stack-based buffer. Attackers capable of pairing a malicious Bluetooth device with the target can exploit this vulnerability, gaining the ability to execute arbitrary code within the context of the device's root permissions.

References