CVE-2026-118609 is a stack-based buffer overflow vulnerability in the Android Auto connection handler of Alpine iLX-F511 devices. It allows an attacker with physical access to execute arbitrary code with root privileges without requiring authentication. The flaw arises from improper validation of user-supplied data length before copying it to a fixed-length stack buffer.