CVE-2026-119738 Details

An infinite loop vulnerability has been identified in the VobSub subtitle decoder library (libsub_vob), which is part of the Amlogic DroidLogic SubTitleService. This vulnerability is present on Nexbox A95X TV boxes with the Amlogic S905X chipset, running Android 7.1.2. The issue arises in the 'get_vob_spu()' function, where mismatched length fields create an unreachable loop exit condition. This flaw allows unauthenticated network attackers or local users to load malicious VobSub (.sub) files, causing the subtitle decoding thread to enter an infinite loop, consuming 100% of a CPU core and leading to a denial-of-service condition.

The vulnerability can be fixed by adding a proper exit condition in the 'get_vob_spu()' function to handle malformed packets correctly, preventing the infinite loop.