(0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-118609.
Read at Zero Day Initiative published advisories
- Vendor
- Product
- Android
- CVSS
- 6.8
- Exposure class
- Mobile OS
Why it ranks 22 (Routine)
- CVSS 6.8 medium
- Product class: mobile OS
- Widely deployed vendor product (Google)
- Covered by 2 independent sources
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Zero Day Initiative published advisories (zerodayinitiative.com)
- CVE-2026-118609 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.