Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Nexbox Clear all filters
TI-2026-84101 CVE-2026-119740 · GHSA-7prp-vrqq-87rq

Unauthenticated UART console in Nexbox A95X TV boxes

Priority HIGH 66

Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated console exposed via an internal UART header on the PCB that allows physical attackers to obtain an interactive shell as uid 2000 (system…

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00791 Published 2026-11-02 No fix listed CWE-306
TI-2026-84026 CVE-2026-119739 · GHSA-mw5f-6hxf-hxw4

Out-of-bounds write in Amlogic DroidLogic VobSub subtitle decoder

Priority LOW 31

The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an out-of-bounds write vulnerability in vob_fill_pixel() that allows r…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00371 Published 2026-11-02 No fix listed CWE-787
TI-2026-84025 CVE-2026-119738 · GHSA-wf2f-xx3j-mr34

Infinite loop in Amlogic DroidLogic SubTitleService VobSub decoder

Priority HIGH 70

The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an infinite loop vulnerability in get_vob_spu() that allows unauthenti…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00289 Published 2026-11-02 No fix listed CWE-835
TI-2026-84024 CVE-2026-119737 · GHSA-cqfv-369w-xpwm

Amlogic pppoe_wrapper Command Injection via AF_UNIX Socket

Priority HIGH 72

The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00891 Published 2026-11-02 No fix listed CWE-78