CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices, there is a bug in handling certain integer values, allowing attackers to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices, a vulnerability allows attackers to gain privileges via a crafted application that sends short DCI request packets.
Buffer overflow in Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application.
An integer underflow in diag_dci.c in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges or obtain sensitive information via a crafted application.
The diag driver in Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, allowing attackers to gain privileges via a crafted application.
Multiple buffer overflows in Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application.
The Linux kernel before 3.11 on ARM platforms, used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly consider user-space access to the TPIDRURW register, allowing local users to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, certain index values are not validated, allowing attackers to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, a vulnerability allows attackers to gain privileges via an application that provides a crafted mask value.
In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, a vulnerability exists that does not validate the number of streams. This allows attackers to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, a vulnerability exists that does not validate a certain parameter. This allows attackers to gain privileges via a crafted application.
The Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices do not properly restrict user-space input, allowing attackers to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, ioctl calls are not validated, allowing attackers to gain privileges via a crafted application.
There is an integer underflow in the diag driver in Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices. This allows attackers to gain privileges or obtain sensitive information via a crafted application.
The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application.
The LG Electronics bootloader on Nexus 5X devices before 2016-08-05 contains a vulnerability that allows attackers to gain privileges by leveraging access to a privileged process.
Integer overflow in app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted header field in a boot image.
The ION driver in Android before 2016-08-05 on Pixel C devices allows attackers to gain privileges via a crafted application.
The NVIDIA media driver in Android before 2016-08-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application.
The NVIDIA media driver in Android before 2016-08-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application.