（CVE-2025-8477）Alpine iLX-507 vCard解析堆栈缓冲区溢出远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-8477
• https://cve.imfht.com/detail/CVE-2025-8477?lang=en
• https://github.com/advisories/GHSA-8x5q-fmc6-r74x
• https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2025-8477
• https://www.zerodayinitiative.com/advisories/ZDI-25-767/
• https://www.nsfocus.net/vulndb/130252
• https://avd.aliyun.com/product?prod=ilx-507_firmware&page=0
• https://cve.imfht.com/detail/CVE-2025-8477
• https://feedly.com/cve/CVE-2025-8477

Related Vulnerabilities

• （CVE-2025-8472）Alpine iLX-507 vCard解析堆栈型缓冲区溢出漏洞
• （CVE-2025-8476）Alpine iLX-507 TIDAL证书验证不足漏洞
• (CVE-2025-8473) Alpine iLX-507 UPDM_wstpCBCUpdStart命令注入漏洞
• （CVE-2025-8480）Alpine iLX-507命令注入漏洞
• （CVE-2025-8475）Alpine iLX-507设备AVRCP协议栈基于堆栈的缓冲区溢出远程代码执行漏洞
• Alpine 身份绕过漏洞(CVE-2022-23554)