Read the docs

Nexbox

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Nexbox records in CISA KEV

No Nexbox vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-84024 CVE-2026-119737 · GHSA-cqfv-369w-xpwm

Amlogic pppoe_wrapper Command Injection via AF_UNIX Socket

Priority HIGH 72

The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00891 Published 2026-11-02 No fix listed CWE-78
TI-2026-84025 CVE-2026-119738 · GHSA-wf2f-xx3j-mr34

Infinite loop in Amlogic DroidLogic SubTitleService VobSub decoder

Priority HIGH 70

The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an infinite loop vulnerability in get_vob_spu() that allows unauthenti…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00289 Published 2026-11-02 No fix listed CWE-835
TI-2026-84101 CVE-2026-119740 · GHSA-7prp-vrqq-87rq

Unauthenticated UART console in Nexbox A95X TV boxes

Priority HIGH 66

Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated console exposed via an internal UART header on the PCB that allows physical attackers to obtain an interactive shell as uid 2000 (system…

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00791 Published 2026-11-02 No fix listed CWE-306
TI-2026-84026 CVE-2026-119739 · GHSA-mw5f-6hxf-hxw4

Out-of-bounds write in Amlogic DroidLogic VobSub subtitle decoder

Priority LOW 31

The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an out-of-bounds write vulnerability in vob_fill_pixel() that allows r…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00371 Published 2026-11-02 No fix listed CWE-787
Open these records in search →