CVE-2026-52167
Received Received - Intake

Stack Overflow in AOC LC32D1320 Firmware via PSB File

Publication date: 2026-10-15

Last updated on: 2026-10-15

Assigner: MITRE

Description
A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-15
Last Modified
2026-10-15
Generated
2026-10-15
AI Q&A
2026-10-15
EPSS Evaluated
N/A
NVD
CVE-2026-52167
EUVD
EUVD-2026-102128

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a n/a n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-52167 is a stack overflow vulnerability in the AOC LC32D1320 TV's Media Player subtitle parser (gensub_ParsePsb) in libGenSub.so. A crafted .psb subtitle file paired with a video triggers a buffer overflow when loaded, overwriting the stack including return addresses. This allows arbitrary code execution by redirecting execution to system() using a gadget in libc.so.0.

Detection Guidance

Detecting this vulnerability requires analyzing subtitle file processing on the AOC LC32D1320 TV. Monitor for crashes when .psb subtitle files are loaded, especially if they trigger coredumps to USB. Check for unexpected memory corruption or arbitrary code execution signs during subtitle parsing.

Impact Analysis

An attacker could exploit this to execute arbitrary commands on the TV by providing a malicious subtitle file. This could lead to unauthorized file writes, system modifications, or even installation of additional malware. The exploit chain also enables porting applications like DOOM to the TV via the framebuffer.

Mitigation Strategies

Immediately stop using external .psb subtitle files on the AOC LC32D1320 TV. Disable coredump redirection to USB if configured. Update the TV firmware if a patch is available. Consider isolating the device from untrusted networks or media sources.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-52167. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart