Name of the Vulnerable Software and Affected Versions:

Alpine iLX-507 (affected versions not specified)

Description:

This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this, as the target must connect to a malicious Bluetooth device. The flaw resides within the parsing of vCard data due to insufficient validation of user-supplied data length before copying it to a stack-based buffer, potentially leading to arbitrary code execution in the context of root.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.