Threats tagged 'ghsa-wf2f-xx3j-mr34'

The VobSub subtitle decoder libsub_vob, part of the Amlogic DroidLogic SubTitleService on Nexbox A95X TV boxes, has an infinite loop vulnerability in the get_vob_spu() function. This flaw allows unauthenticated network attackers or local users to cause the subtitle decode thread to spin at 100% CPU indefinitely by sending crafted AMLU data blocks over TCP port 10100 or by loading malicious VobSub (.sub) files. The vulnerability results in a denial of service condition due to an unreachable loop exit triggered by mismatched length fields.