All vulnerabilities
CVE-2026-118605

Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-F511
Open in ThreatlineRecord JSON
CVSS
8.0High
ExploitationExploitation reported1 outlet report it, first 28 Oct 2026. Not yet in the KEV catalogReports
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published28 Oct 2026Updated 28 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

  1. 28 Oct 2026, 16:50 UTCPublishedCVE List
  2. 28 Oct 2026, 19:56 UTCExploit code publicBluesky: CVE posts
  3. 28 Oct 2026, 19:56 UTCFirst reported exploitedBluesky: CVE posts
  4. NowNot on CISA's known exploited list yet

Reports 1

One outlet reports exploitation. Reports are not confirmation; each links to its source.

Description

Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability.

The specific flaw exists within the prh_sdp_service_search_decode function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-29069.

Text from CVE List

Affected versions 1

  • iLX-F511affected: 7.0.000CVE List

References 1