CVE-2026-118608 is an out-of-bounds read vulnerability in the prh_rfcomm_cc_process_test function of the libanwbtstack.so component on Alpine iLX-F511 devices. This flaw allows network-adjacent attackers who can pair a malicious Bluetooth device with the target to disclose sensitive information. The vulnerability arises from improper validation of user-supplied data, leading to reading beyond allocated buffer boundaries. It has a low CVSS score of 3.5 and does not impact integrity or availability.