{"id":"CVE-2026-52167","title":"A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.","summary":"A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.","severity":"medium","published":"2026-10-15","updated":"2026-10-15","sourceUpdated":"2026-10-15T16:18:12.490","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-52167","references":[{"url":"https://blog.facil.wtf/writeup-aoc-lc32d1320.html","label":"cve@mitre.org"},{"url":"https://github.com/teogabrielofc/libaoc","label":"cve@mitre.org"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-10-15T16:13:11.714Z","epss":0.00133,"epssPercentile":0.0281,"cvss":6.2,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-26T17:19:35.894478Z"},"cvssSource":"adp","slug":"CVE-2026-52167","body":"## Overview\n\nA stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":34,"depthScoreParts":{"impact":34.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":229688,"id":"CVE-2026-52167","ts":1793036056056,"field":"cvss","old":null,"new":"6.2"},{"seq":229687,"id":"CVE-2026-52167","ts":1793036056056,"field":"severity","old":"none","new":"medium"}]}