ZDI-26-826: (0Day) (Pwn2Own) Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability
Summary: ZDI published a 0-day advisory for an out-of-bounds read in the prh_rfcomm_cc_process_test function of libanwbtstack.so on Alpine iLX-F511 devices, a flaw that lets network-adjacent attackers disclose sensitive information after first pairing a malicious Bluetooth device with the target. ZDI reported the issue to the vendor on 02/05/26, the vendor acknowledged it and requested an extension on 06/07/26, ZDI requested a status update on 07/21/26, and on 10/15/26 ZDI notified the vendor of its intent to publish as a 0-day.
Bottom line: The flaw is an information disclosure bug that an attacker can chain with other vulnerabilities to execute arbitrary code as root, and the only mitigation ZDI offers is to restrict interaction with the product - roughly eight months after the initial report, no fix is described.
Read the original at Zero Day Initiative ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-118608
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026