ZDI 2026-10-28

ZDI-26-821: (0Day) (Pwn2Own) Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Machine-generated analysis · WAYSCloud LLM

A stack-based buffer overflow in the vCard parsing code can be triggered via Bluetooth on Alpine iLX-F511 devices.

Context

The advisory concerns Alpine iLX-F511 devices. It describes a stack-based buffer overflow in the vCard parsing stack that can be exploited remotely via Bluetooth. Exploitation requires the target to connect to a malicious Bluetooth device, indicating a user interaction requirement. The CVSS base score is 8.0.

Operator considerations

Check: inventory Alpine iLX-F511 devices in the environment.
Isolate: disable or restrict Bluetooth pairing to unknown devices.
Log: monitor Bluetooth pairing attempts for unexpected connections.

From Zero Day Initiative ↗

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device. The ZDI has assigned a CVSS rating of 8.0.

Read the full advisory on ZDI →

Related advisories