Buffer Overflow Vulnerability in Alpine iLX-507 CarPlay Devices

CVE-2025-8474

What is CVE-2025-8474?

A vulnerability in the Apple CarPlay protocol used by Alpine iLX-507 devices allows attackers with physical access to execute arbitrary code. The flaw arises from improper validation of the length of user-supplied data before it is copied to a fixed-length stack-based buffer. Exploitation of this vulnerability does not require authentication, granting potential attackers elevated access, enabling them to execute code in the context of the device's root environment.

References