Threats tagged 'ghsa-cqfv-369w-xpwm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.5	CVE-2026-119737The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes High8.52026-11-02GCVE DatabaseCVE-2026-119737 The pppoe_wrapper vendor daemon in the Amlogic Android SDK, used on Nexbox A95X TV boxes with Amlogic S905/S905X chips, has a command injection vulnerability. Local attackers can send crafted messages to a world-writable AF_UNIX datagram socket to execute arbitrary commands as root, leading to full privilege escalation. Report on CVE-2026-119737 Vulnerability CWE-78 #ghsa-cqfv-369w-xpwm	GCVE Database	2026-11-02

Page 1 of 1