Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Amlogic Clear all filters
TI-2026-84026 CVE-2026-119739 · GHSA-mw5f-6hxf-hxw4

Out-of-bounds write in Amlogic DroidLogic VobSub subtitle decoder

Priority LOW 31

The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an out-of-bounds write vulnerability in vob_fill_pixel() that allows r…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00371 Published 2026-11-02 No fix listed CWE-787
TI-2026-84025 CVE-2026-119738 · GHSA-wf2f-xx3j-mr34

Infinite loop in Amlogic DroidLogic SubTitleService VobSub decoder

Priority HIGH 70

The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an infinite loop vulnerability in get_vob_spu() that allows unauthenti…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00289 Published 2026-11-02 No fix listed CWE-835
TI-2026-84024 CVE-2026-119737 · GHSA-cqfv-369w-xpwm

Amlogic pppoe_wrapper Command Injection via AF_UNIX Socket

Priority HIGH 72

The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00891 Published 2026-11-02 No fix listed CWE-78