Threats tagged 'ghsa-mw5f-6hxf-hxw4'

The VobSub subtitle decoder libsub_vob, part of the Amlogic DroidLogic SubTitleService on Nexbox A95X TV boxes, contains an out-of-bounds write vulnerability in the vob_fill_pixel() function. This flaw allows remote attackers to corrupt stack memory by sending a crafted SET_CONTR command with a manipulated alpha value that causes an unbounded array index access beyond a fixed four-element array. Exploitation can occur via unauthenticated TCP socket 10100 or a malicious .sub subtitle file, potentially causing silent stack corruption or process crashes.