Halo9 vulnerabilities

3 known vulnerabilities in Halo9 from Alpine. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  Halo9: Improper Control of Generation of Code

  CVE-2024-23963Jan 31, 2025Alpine

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vul

• 7.5 High severity

  Halo9: Out-of-bounds Write

  CVE-2024-23935Sep 28, 2024Alpine

  Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability

• 8.8 High severity

  Halo9: Use After Free

  CVE-2024-23923Sep 28, 2024Alpine

  Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. Authentication is not required to exploit thi