CVE-2024-23963

Description

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the PBAP_DecodeVCARD function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.

PUBLISHED Reserved 2024-01-25 | Published 2025-01-30 | Updated 2025-07-01 | Assigner icscert

Problem types

CWE-94

Product status

Credits

Le Tran Hai Tung reported to ZDI. finder

References

www.zerodayinitiative.com/advisories/ZDI-24-850/

cve.org (CVE-2024-23963)

nvd.nist.gov (CVE-2024-23963)

Download JSON