CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.22)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Qualcomm camera driver in Android before 2016-10-05 has a vulnerability related to the use of variable-length arrays. This allows attackers to gain privileges via a crafted application.
A vulnerability in mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application.
A vulnerability in mediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application.
The Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices has a vulnerability that allows attackers to gain privileges via a crafted application.
The NVIDIA MMC test driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application.
The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application.
The RilSapSocket.cpp file in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 relies on variable-length arrays, allowing attackers to gain privileges via a crafted application.
The Framework Listener in Android versions before 4.4.4, 5.0.2, 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 has a vulnerability that allows attackers to gain privileges via a crafted application.
The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process. This allows physically proximate attackers to authenticate as an arbitrary user by leveraging lockscreen access.
A vulnerability in the Camera service in Android allows attackers to gain privileges via a crafted application. This affects Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01.
A vulnerability in the Camera service in Android allows attackers to gain privileges via a crafted application. This affects Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01.
A race condition exists in MmsProvider.java in Android, allowing attackers to gain privileges via a crafted application that modifies a database between two open operations.
In Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01, there is a vulnerability related to the lack of validation of a static_cast operation in MediaPlayerService.cpp, allowing attackers to gain privileges via a crafted application.
The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allow attackers to gain privileges via a crafted application.
In Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01, there is a vulnerability in the Process class in the Zygote module that allows attackers to gain privileges via a crafted application.
In the SoundTriggerHwService in mediaserver in Android before version 5.0.2, 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01, a vulnerability allows attackers to gain privileges via a crafted application.
The SoftMPEG4 component in libstagefright in mediaserver in Android before version 4.4.4, 5.0.2, 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application.
The Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices has a vulnerability that allows attackers to gain privileges via a crafted application sending a SENDACTIONFRAME command.
The Qualcomm camera driver in Android before 2016-10-05 contains a vulnerability that allows attackers to gain privileges via a crafted application. This affects Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices.
Multiple integer overflows in the Qualcomm cryptographic engine driver in Android before 2016-10-05 allow attackers to gain privileges via a crafted application.