Exluck99

The issue is related to an integer overflow in Bluetooth packet handling, which can lead to remote code execution. This was demonstrated at Pwn2Own.

The issue concerns an improper isolation authentication bypass vulnerability in the Bluetooth functionality. It was discovered by Mikhail Evdokimov from PCAutomotive.

The issue is related to an integer overflow in the Bluetooth SDP protocol, which can lead to remote code execution. This was demonstrated at Pwn2Own.

The issue is related to a heap-based buffer overflow in the Bluetooth AVCTP protocol, which can lead to remote code execution. This was demonstrated at Pwn2Own.

This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this, as the target must connect to a malicious Bluetooth device. The flaw resides within the parsing of vCard data due to insufficient validation of user-supplied data length before copying it to a stack-based buffer, potentially leading to arbitrary code execution in the context of root.