CVE-2026-119738

The VobSub subtitle decoder libsubvob part of the Amlogic DroidLogic SubTitleService, as shipped on Nexbox A95X Amlogic S905X TV boxes, contains an infinite loop vulnerability in getvobspu that allows unauthenticated network attackers or local users loading malicious files to trigger an unreachab...

CVE-2026-119738

The libsub_vob VobSub subtitle decoder, component of the Amlogic DroidLogic SubTitleService on Nexbox A95X (Amlogic S905X) TV boxes, contains an infinite loop vulnerability in the get_vob_spu() function. This issue is caused by mismatched length fields that trigger an unreachable loop exit condit...

CVE-2026-119738 Amlogic DroidLogic SubTitleService Infinite Loop via get_vob_spu()

The VobSub subtitle decoder libsubvob part of the Amlogic DroidLogic SubTitleService, as shipped on Nexbox A95X Amlogic S905X TV boxes, contains an infinite loop vulnerability in getvobspu that allows unauthenticated network attackers or local users loading malicious files to trigger an unreachab...

EUVD-2026-115547

The VobSub subtitle decoder libsubvob part of the Amlogic DroidLogic SubTitleService, as shipped on Nexbox A95X Amlogic S905X TV boxes, contains an infinite loop vulnerability in getvobspu that allows unauthenticated network attackers or local users loading malicious files to trigger an unreachab...