PT-2026-135666

The VobSub subtitle decoder libsub vob part of the Amlogic DroidLogic SubTitleService, as shipped on Nexbox A95X Amlogic S905X TV boxes, contains an out-of-bounds write vulnerability in vob fill pixel that allows remote attackers to corrupt stack memory by sending a crafted SET CONTR command with...

PT-2026-135665

The VobSub subtitle decoder libsub vob part of the Amlogic DroidLogic SubTitleService, as shipped on Nexbox A95X Amlogic S905X TV boxes, contains an infinite loop vulnerability in get vob spu that allows unauthenticated network attackers or local users loading malicious files to trigger an...