PatchTheCVEalpsalpine vulnerabilities
Recent CVEs affecting alpsalpine products. 14 tracked.
alpsalpine has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-08-01. Highest priority: CVE-2024-23923 (score 45/100).
- CVE-2025-8480 HIGH 8.0 MITIGATE Alpine iLX-507 Command Injection Remote Code Execution
- CVE-2025-8477 HIGH 7.4 MITIGATE Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-8476 HIGH 8.0 MITIGATE Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability
- CVE-2025-8475 HIGH 7.4 MITIGATE Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-8474 MEDIUM 6.8 MITIGATE Alpine iLX-507 CarPlay Stack-based Buffer Overflow Code Execution Vulnerability
- CVE-2025-8473 MEDIUM 6.6 MITIGATE Alpine iLX-507 UPDM_wstpCBCUpdStart Command Injection Vulnerability
- CVE-2025-8472 HIGH 7.4 MITIGATE Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-23963 HIGH 8.0 MITIGATE This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Al
- CVE-2024-23962 MEDIUM 5.3 MITIGATE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Alpi
- CVE-2024-23961 MEDIUM 6.8 MITIGATE Alpine Halo9 UPDM_wemCmdUpdFSpeDecomp Command Injection Remote Code Execution Vulnerability
- CVE-2024-23960 MEDIUM 4.6 MITIGATE Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability
- CVE-2024-23935 HIGH 8.0 MITIGATE Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-23924 MEDIUM 6.8 MITIGATE Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution Vulnerability
- CVE-2024-23923 HIGH 8.8 MITIGATE Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability
FAQ
How do I fix alpsalpine vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is alpsalpine being exploited right now?
None of the tracked alpsalpine CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which alpsalpine CVE should I patch first?
CVE-2024-23923 currently ranks highest (45/100): Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability.