Alpine iLX-507 CarPlay Stack-Based Buffer Overflow Code Execution Vulnerability

A stack-based buffer overflow vulnerability allowing arbitrary code execution has been identified in the Alpine iLX-507 device, specifically within the CarPlay implementation. This issue arises from inadequate validation of user-supplied data length before it is copied to a fixed-length stack buffer, enabling physically present attackers to execute code with root privileges. No authentication is required for exploitation.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device, with the executed code running in the context of the root user.

Remediation

The recommended mitigation strategy is to limit interaction with the affected product.