CyberSecBulletin

Alpine vulnerabilities

We track 13 vulnerabilities in Alpine products across 3 products. 13 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.

13vulnerabilities
0critical
13high
0exploited
8.0average CVSS score

Latest Alpine vulnerabilities

  • 8.8 High severity

    iLX-F511: Stack-based Buffer Overflow

    CVE-2026-118610Alpine

    Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not req

  • 8.8 High severity

    iLX-F511: Exposed Dangerous Method or Function

    CVE-2026-118606Alpine

    Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not require

  • 8.0 High severity

    iLX-F511: Stack-based Buffer Overflow

    CVE-2026-118605Alpine

    Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must

  • 8.0 High severity

    iLX-F511: Stack-based Buffer Overflow

    CVE-2026-118603Alpine

    Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this vuln

  • 7.8 High severity

    iLX-F511: Exposed Dangerous Method or Function

    CVE-2026-118602Alpine

    Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute lo

  • 8.0 High severity

    iLX-507: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2025-8480Alpine

    Alpine iLX-507 Command Injection Remote Code Execution. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specif

  • 7.4 High severity

    iLX-507: Stack-based Buffer Overflow

    CVE-2025-8477Alpine

    Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-507 devices. User interaction is required to exploit this vulner

  • 8.0 High severity

    iLX-507: Improper Certificate Validation

    CVE-2025-8476Alpine

    Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability

  • 7.4 High severity

    iLX-507: Stack-based Buffer Overflow

    CVE-2025-8475Alpine

    Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit th

  • 7.4 High severity

    iLX-507: Stack-based Buffer Overflow

    CVE-2025-8472Alpine

    Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to ex

  • 8.0 High severity

    Halo9: Improper Control of Generation of Code

    CVE-2024-23963Alpine

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vul

  • 7.5 High severity

    Halo9: Out-of-bounds Write

    CVE-2024-23935Alpine

    Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability

  • 8.8 High severity

    Halo9: Use After Free

    CVE-2024-23923Alpine

    Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. Authentication is not required to exploit thi