Alpine Halo9 Stack-Based Buffer Overflow Remote Code Execution Vulnerability

A stack-based buffer overflow vulnerability has been identified in Alpine Halo9 devices, allowing network-adjacent attackers to execute arbitrary code. This issue arises in the PBAP_DecodeVCARD function, where user-supplied data is not properly validated before being copied to a stack-based buffer. To exploit this vulnerability, an attacker must first pair a malicious Bluetooth device with the target system. The executed code runs with root privileges.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device, with the executed code running in the context of the root user.