4 matches found
CVE-2026-119739 Amlogic DroidLogic SubTitleService Out-of-Bounds Write via VobSub SET_CONTR
The VobSub subtitle decoder libsubvob part of the Amlogic DroidLogic SubTitleService, as shipped on Nexbox A95X Amlogic S905X TV boxes, contains an out-of-bounds write vulnerability in vobfillpixel that allows remote attackers to corrupt stack memory by sending a crafted SETCONTR command with an...
EUVD-2026-115548
The VobSub subtitle decoder libsubvob part of the Amlogic DroidLogic SubTitleService, as shipped on Nexbox A95X Amlogic S905X TV boxes, contains an out-of-bounds write vulnerability in vobfillpixel that allows remote attackers to corrupt stack memory by sending a crafted SETCONTR command with an...
CVE-2026-119739
The libsub_vob VobSub subtitle decoder, part of the Amlogic DroidLogic SubTitleService on Nexbox A95X (Amlogic S905X) TV boxes, contains an out-of-bounds write vulnerability in the vob_fill_pixel() function. An attacker can provide a crafted SET_CONTR command with a malicious alpha value, causing...
CVE-2026-119739: Nexbox, Amlogic: The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X…
The VobSub subtitle decoder libsubvob part of the Amlogic DroidLogic SubTitleService, as shipped on Nexbox A95X Amlogic S905X TV boxes, contains an out-of-bounds write vulnerability in vobfillpixel that allows remote attackers to corrupt stack memory by sending a crafted SETCONTR command with an...