Stack-based Buffer Overflow in Alpine iLX-F511 Android Auto Connection Handler

CVE-2026-118609

What is CVE-2026-118609?

The Alpine iLX-F511 device features a vulnerability within its Android Auto connection handler that permits local attackers to execute arbitrary code. This issue is caused by inadequate validation of the length of user-supplied data, leading to potential exploitation through the fixed-length stack-based buffer. Attackers can leverage this flaw without the need for authentication, posing a significant risk to device integrity and user security.

References