CNNVD-202508-089 Information

CNNVD ID

CNNVD-202508-089

CVE-2025-8476

  • CNNVD Published: 2025-08-01

Description (Chinese)

Alpine iLX-507是美国Alpine公司的一个多媒体接收器。 Alpine iLX-507存在信任管理问题漏洞,该漏洞源于TIDAL音乐流应用证书验证不当,可能导致任意代码执行。

Description (English)

Alpine iLX-507 is a multimedia receiver for Alpine, United States. Alpine iLX-507 had a trust management gap, which stemmed from the inappropriate certification of the TIDAL Music Stream application certificate, which could lead to arbitrary code execution.

Hazard Level

Medium

Vulnerability Type

信任管理问题

Affected Vendor

Alpine

Published

2025-08-01

Last Modified

2026-02-24

References

https://www.zerodayinitiative.com/advisories/ZDI-25-765/

Share on: