Skip to content
OpenAdvisories

Vendor

Nexbox

4 known vulnerabilities.

Products

A95X 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-119740

    Nexbox A95X Amlogic S905X UART Unauthenticated Console Access

    Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated console exposed via an internal UART header on the PCB that allows physical attackers to obtain an interactive shell as uid 2000 (system) without any credentials. Attackers wi…

    Nexbox A95X
  • Medium 5.3
    CVE-2026-119739

    Amlogic DroidLogic SubTitleService Out-of-Bounds Write via VobSub SET_CONTR

    The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an out-of-bounds write vulnerability in vob_fill_pixel() that allows remote attackers to corrupt stack memory…

    Nexbox Amlogic A95X Amlogic Android SDK Android
  • Medium 5.3
    CVE-2026-119738

    Amlogic DroidLogic SubTitleService Infinite Loop via get_vob_spu()

    The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an infinite loop vulnerability in get_vob_spu() that allows unauthenticated network attackers or local users …

    Nexbox Amlogic A95X Amlogic Android SDK Android