CVE-2024-23963
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jan 31, 2025
CWE ID 863
Summary
CVE-2024-23963 is a newly disclosed vulnerability that impacts Alpine Halo9 devices. This issue enables network-adjacent attackers to execute arbitrary code after successfully pairing a malicious Bluetooth device with the targeted system. The root cause of the vulnerability lies within the PBAC_DecodeVCARD function, where user-supplied data lacks proper validation, allowing attackers to overflow stack-based buffers. Successful exploitation grants the attacker root privileges.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.