CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.29)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-2017-0843 is a privilege escalation vulnerability in the MediaTek ccci module in Android. It affects the Android kernel and may lead to unauthorized access to the system.
There is an elevation of privilege vulnerability in the Android system related to Bluetooth functionality. It affects versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
A remote code execution vulnerability exists in the Android system (libutils). Affects Android versions from 5.0.2 to 8.0.
CVE-2017-0840 is an information disclosure vulnerability in the Android media framework (libstagefright). It affects Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
CVE-2017-0839 is an information disclosure vulnerability in the Android media framework (libeffects). It affects Android versions from 5.0.2 to 8.0.
CVE-2017-0838 is a privilege escalation vulnerability in the Android media framework (libstagefright). It affects Android versions 7.0, 7.1.1, and 7.1.2.
CVE-2017-0836 is a remote code execution vulnerability in the Android media framework (libhevc). It affects Android versions from 5.0.2 to 8.0.
CVE-2017-0835 is a remote code execution vulnerability in the Android media framework (libmpeg2). It affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
CVE-2017-0834 is a remote code execution vulnerability in the Android media framework (libmpeg2). It affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
CVE-2017-0833 is a remote code execution vulnerability in the Android media framework (libavc). It affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
CVE-2017-0832 is a remote code execution vulnerability in the Android media framework (libmpeg2). It affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
CVE-2017-0831 is a privilege escalation vulnerability in the Android framework, specifically in the window manager. It affects version 8.0 of Android.
CVE-2017-0830 is a privilege escalation vulnerability in the Android framework, specifically in the device policy client. It affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
In Android for MSM, Firefox OS for MSM, and QRD Android, a buffer overflow vulnerability exists in the boot loader while parsing the splash image.
In Android for MSM, Firefox OS for MSM, and QRD Android, there is a vulnerability in the MDSS kernel driver that can lead to a buffer overflow during HDMI CEC parsing if the frame size is out of range.
In Android for MSM, Firefox OS for MSM, and QRD Android, there is a direct access to a user-space pointer in a camera driver. This affects all Android releases from CAF using the Linux kernel.
In Android for MSM, Firefox OS for MSM, and QRD Android, while processing OEM unlock/unlock-go fastboot commands, a data leak may occur due to writing uninitialized stack structure to non-volatile memory.
In Android for MSM, Firefox OS for MSM, and QRD Android, a buffer over-read vulnerability exists in the camera driver function msm_isp_stop_stats_stream. The variable stream_cfg_cmd->num_streams is from userspace and is not checked against 'MSM_ISP_STATS_MAX'.
In Android for MSM, Firefox OS for MSM, and QRD Android, there is a vulnerability related to incorrect buffer size checking in the qbt1000 ioctl handler, potentially leading to a buffer overflow.
In Android for MSM, Firefox OS for MSM, and QRD Android, there is a lack of race condition protection while updating the msg mask table, which can lead to buffer over-read. Additionally, access to freed memory can occur while updating msg_mask information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS