CVE-2026-118610

Name of the Vulnerable Software and Affected Versions Alpine iLX-F511 (affected versions not specified)

Description An issue exists in the Android Auto service where the system fails to properly validate the length of user-supplied data before copying it into a fixed-length stack-based buffer. This allows network-adjacent attackers to execute arbitrary code with root privileges without requiring authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.