Stack-Based Buffer Overflow in Alpine iLX-F511 Devices
CVE-2026-118605

8HIGH

Key Information:

Vendor

Alpine

Status
Ilx-f511
Vendor
CVE Published:
28 October 2026

What is CVE-2026-118605?

A stack-based buffer overflow vulnerability has been identified in the prh_sdp_service_search_decode function of Alpine iLX-F511 devices. This security flaw arises from inadequate validation of user-supplied data lengths before being copied to a stack-based buffer. By exploiting this vulnerability, network-adjacent attackers can execute arbitrary code with root privileges, provided they first establish a pairing with a malicious Bluetooth device. It highlights the importance of stringent data validation and security measures in IoT devices to safeguard against potential exploits.

Affected Version(s)

iLX-F511 7.0.000

References

https://www.zerodayinitiative.com/advisories/ZDI-26-823/
x_research-advisory

CVSS V3.0

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.