CVE-2026-119739

The libsub_vob VobSub subtitle decoder, part of the Amlogic DroidLogic SubTitleService on Nexbox A95X (Amlogic S905X) TV boxes, contains an out-of-bounds write vulnerability in the vob_fill_pixel() function. An attacker can provide a crafted SET_CONTR command with a malicious alpha value, causing...