Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-52167

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 AOC LC32D1320 v2.05 设备的 gensub_ParsePsb() 函数中存在一个栈溢出漏洞，攻击者通过提供精心构造的 .PSB 字幕文件，可导致拒绝服务（DoS）攻击。

AI Predicted 6.5 Difficulty: Easy EPSS 0.17% · P6

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
n/a n/a n/a affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-52167

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2026-52167

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-52167

请登录查看更多情报信息。

Security Blog Posts for CVE-2026-52167 (1)

Other References for CVE-2026-52167 (1)

Same Patch Batch · n/a · 2026-10-15 · 14 CVEs total

CVE-2026-106700 8.8 HIGH ELADMIN v2.7及之前版本存在越权漏洞
CVE-2026-106708 8.8 HIGH XXL-JOB<=3.5.0用户管理控制器CSRF漏洞
CVE-2026-106701 6.1 MEDIUM ELADMIN <2.7 WebSocketServer XSS漏洞
CVE-2026-106707 5.4 MEDIUM XXL-JOB<=3.5.0-快照存储型XSS漏洞
CVE-2026-106706 5.4 MEDIUM XXL-JOB<=3.5.0 存储型XSS漏洞
CVE-2026-104586 WHM/cpanel插件AUTOM8N命令注入漏洞
CVE-2026-95179 lottie-android <= 6.7.1 JSON解析递归拒绝服务漏洞
CVE-2026-95180 AgentWeb v5.1.6及更早版本权限控制缺陷致信息泄露
CVE-2026-95155 Jackson 1.x JSON深度嵌套导致拒绝服务漏洞
CVE-2026-88753 markdown2≤v2.5.5正则表达式DoS漏洞
CVE-2026-78851 Grav CMS 2.0.3-2.0.6目录遍历漏洞
CVE-2026-78850 Matomo v5.11.2 SiteContentDetector 信息泄露漏洞
CVE-2026-36436 BRPerfX 1.4.4.0配置信息泄露漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2026-52167

No comments yet

Leave a comment