CVE-2026-119738

The VobSub subtitle decoder libsubvob part of the Amlogic DroidLogic SubTitleService, as shipped on Nexbox A95X Amlogic S905X TV boxes, contains an infinite loop vulnerability in getvobspu that allows unauthenticated network attackers or local users loading malicious files to trigger an unreachab...