Alpsalpine 15 CVEs across 5 Alpsalpine products. Browse Alpsalpine vulnerabilities, severities, and proof-of-concept exploits.
Alpsalpine products with known CVEs Alpsalpine CVEs — newest first CVE Severity Score Published Summary CVE-2025-8480High 8.02025-08-01 Alpine iLX-507 Command Injection Remote Code Execution. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installation… CVE-2025-8477High 7.42025-08-01 Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute a… CVE-2025-8476High 8.02025-08-01 Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected… CVE-2025-8475High 7.42025-08-01 Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary… CVE-2025-8474Medium 6.82025-08-01 Alpine iLX-507 CarPlay Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary co… CVE-2025-8473Medium 6.62025-08-01 Alpine iLX-507 UPDM_wstpCBCUpdStart Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affect… CVE-2025-8472High 7.42025-08-01 Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute a… CVE-2024-23963High 8.02025-01-31 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain… CVE-2024-23962Medium 5.32025-01-31 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Alpine Halo9 devices. Authentication is not required… CVE-2024-23961Medium 6.82024-09-28 Alpine Halo9 UPDM_wemCmdUpdFSpeDecomp Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute… CVE-2024-23960Medium 4.62024-09-28 Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability. This vulnerability allows physically present attackers to bypass signature validat… CVE-2024-23935High 8.02024-09-28 Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitr… CVE-2024-23924Medium 6.82024-09-28 Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execut… CVE-2024-23923High 8.82024-09-28 Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary… CVE-2021-27971High 7.82022-01-31 Alps Alpine Touchpad Driver 10.3201.101.215 is vulnerable to DLL Injection.