CVE-2026-118613

The Ultralytics software is affected by a Deserialization of Untrusted Data vulnerability in the torch_load function. The flaw arises from a lack of proper validation of user-supplied data, which allows remote attackers to execute Remote Code Execution (RCE) . To exploit this, an attacker must in...

firefox: firefox: Sandbox escape via use-after-free in DOM component

A flaw was found in Firefox. A use-after-free memory flaw in the Document Object Model DOM Core and HTML component allows a remote attacker to perform a sandbox escape. By enticing a user to visit a specially crafted web page, an attacker can leverage this vulnerability to execute arbitrary code...

CVE-2026-118611

The Alpine iLX-F511 devices are vulnerable to a heap-based buffer overflow in the Bluetooth OBEX packet handling component. The root cause is the failure to properly validate the length of user-supplied data before copying it to a heap-based buffer. This flaw allows a physically present attacker ...

EUVD-2026-112206

Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

CVE-2026-118611 Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

CVE-2026-118610

The Alpine iLX-F511 device is susceptible to a stack-based buffer overflow within the Android Auto service . The vulnerability is caused by a failure to properly validate the length of user-supplied data before copying it into a fixed-length stack-based buffer. This flaw allows network-adjacent a...

CVE-2026-118610 Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability...

EUVD-2026-112205

Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability...

CVE-2026-118609 Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

EUVD-2026-112204

Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

CVE-2026-118609

The Alpine iLX-F511 devices are vulnerable to a stack-based buffer overflow within the Android Auto connection handler . The root cause is a failure to properly validate the length of user-supplied data before copying it into a fixed-length stack-based buffer. This flaw allows a physically presen...

CVE-2026-118607 Alpine iLX-F511 diagapp Command Injection Vulnerability

Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the diagapp...

EUVD-2026-112202

Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the diagapp...

CVE-2026-118607

The Alpine iLX-F511 device is vulnerable to a command injection flaw within the diagapp component. The vulnerability occurs because the software fails to properly validate a user-supplied string before utilizing it in a system call. A physically present attacker can exploit this issue to execute ...

CVE-2026-118606

The Alpine iLX-F511 device is vulnerable to Remote Code Execution (RCE) due to an exposed dangerous function within its framework service . This flaw allows network-adjacent attackers to execute arbitrary code with root privileges without any authentication. While the vulnerability is documented ...

EUVD-2026-112200

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The...

CVE-2026-118606 Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The...

EUVD-2026-112199

Alpine iLX-F511 prhsdpservicesearchdecode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a...

CVE-2026-118605

The Alpine iLX-F511 device is vulnerable to a stack-based buffer overflow in the prh_sdp_service_search_decode function. The root cause is the lack of proper validation of user-supplied data length before copying it to a stack-based buffer. A network-adjacent attacker who can pair a malicious Blu...

CVE-2026-118605 Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-F511 prhsdpservicesearchdecode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a...