ZDI-26-826: (0Day) (Pwn2Own) Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability
// AI summary
Alpine iLX-F511 devices have an Out-Of-Bounds Read vulnerability (ZDI-26-826) allowing network-adjacent attackers to disclose sensitive information after pairing a malicious Bluetooth device.
// from the source
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 3.5.