Team Confused

**Name of the Vulnerable Software and Affected Versions** Alpine iLX-507 (affected versions not specified) **Description** This issue allows network-adjacent attackers to execute arbitrary code on affected devices. User interaction is required, specifically the target must connect to a malicious Bluetooth device. The flaw resides in the parsing of vCard data due to insufficient validation of user-supplied data before copying it to a fixed-length stack-based buffer, potentially leading to code execution in the context of root. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.