CVE-2025-8472

CVE-2025-8472 describes a stack-based buffer overflow vulnerability in Alpine iLX-507 devices, specifically within its vCard parsing functionality. This flaw allows a network-adjacent attacker to execute arbitrary code with root privileges by crafting malicious vCard data. Exploitation requires user interaction, as the target device must connect to a malicious Bluetooth device. The vulnerability has a CVSS score of 7.4 (HIGH), indicating a significant risk due to its network-adjacent attack vector and high impact on confidentiality, integrity, and availability. While the attack complexity is low, user interaction is required for successful exploitation. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness at this time.