Buffer Overflow Vulnerability in Alpine iLX-F511 Android Auto Service

CVE-2026-118610

What is CVE-2026-118610?

A stack-based buffer overflow vulnerability has been identified in the Android Auto service of the Alpine iLX-F511 device. This flaw arises from insufficient validation of user-supplied data length before it is copied into a fixed-length stack buffer. By exploiting this weakness, an attacker positioned on the same network can execute arbitrary code within the context of the device’s root. Notably, this attack does not necessitate authentication, presenting a significant risk to affected installations.

References