Read the docs

Amlogic

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Amlogic records in CISA KEV

No Amlogic vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-84024 CVE-2026-119737 · GHSA-cqfv-369w-xpwm

Amlogic pppoe_wrapper Command Injection via AF_UNIX Socket

Priority HIGH 72

The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00891 Published 2026-11-02 No fix listed CWE-78
TI-2026-84025 CVE-2026-119738 · GHSA-wf2f-xx3j-mr34

Infinite loop in Amlogic DroidLogic SubTitleService VobSub decoder

Priority HIGH 70

The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an infinite loop vulnerability in get_vob_spu() that allows unauthenti…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00289 Published 2026-11-02 No fix listed CWE-835
TI-2026-84026 CVE-2026-119739 · GHSA-mw5f-6hxf-hxw4

Out-of-bounds write in Amlogic DroidLogic VobSub subtitle decoder

Priority LOW 31

The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an out-of-bounds write vulnerability in vob_fill_pixel() that allows r…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00371 Published 2026-11-02 No fix listed CWE-787
Open these records in search →