Alpsalpine vulnerabilities
We track 8 vulnerabilities in Alpsalpine products across 2 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on August 1, 2025.
Latest Alpsalpine vulnerabilities
- 8.0 High severity
iLX-507: Improper Limitation of a Pathname to a Restricted Directory
Alpine iLX-507 Command Injection Remote Code Execution. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specif
- 7.4 High severity
iLX-507: Stack-based Buffer Overflow
Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-507 devices. User interaction is required to exploit this vulner
- 8.0 High severity
iLX-507: Improper Certificate Validation
Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability
- 7.4 High severity
iLX-507: Stack-based Buffer Overflow
Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit th
- 7.4 High severity
iLX-507: Stack-based Buffer Overflow
Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to ex
- 8.0 High severity
Halo9: Improper Control of Generation of Code
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vul
- 7.5 High severity
Halo9: Out-of-bounds Write
Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability
- 8.8 High severity
Halo9: Use After Free
Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. Authentication is not required to exploit thi