Name of the Vulnerable Software and Affected Versions:

Alpine iLX-507 (affected versions not specified)

Description:

This issue allows network-adjacent attackers to execute arbitrary code on affected devices. User interaction is required, specifically the target must connect to a malicious Bluetooth device. The flaw resides in the parsing of vCard data due to insufficient validation of user-supplied data before copying it to a fixed-length stack-based buffer, potentially leading to code execution in the context of root.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.