CVE-2023-1384

The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3...

RK Smart TV Box MAX and V88 SmartTV Box have security vulnerabilities

The Amazon RK Smart TV Box and V88 SmartTV Box are both set-top boxes from Amazon.com, Inc. A security vulnerability exists in the RK Smart TV Box MAX and V88 SmartTV Box that originated from a vulnerability that allows an attacker to cause a denial of service via the switchNextDisplayInterface...