CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A use-after-free vulnerability in the xprt_set_caller function in rpcb_svc_com.c in rpcbind version 0.2.1 and earlier allows remote attackers to cause a daemon crash via crafted packets involving a PMAP_CALLIT code.
A vulnerability in kernel_crashdump in Apport before version 2.19 allows local users to cause a denial of service (disk consumption) or potentially gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.
A vulnerability in lxc before version 1.0.8 and 1.1.x before version 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on (1) mount target or (2) bind mount source.
In SampleTable.cpp in libstagefright in Android before version 5.1.1 LMY48I, integer promotion is not properly considered, allowing remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted atoms in MP4 data.
CVE-2015-3864 involves an integer underflow in the MPEG4Extractor::parseChunk function in libstagefright, allowing remote attackers to execute arbitrary code via crafted MPEG-4 data. This issue exists due to an incomplete fix for CVE-2015-3824.
Multiple integer overflows in the Blob class in keystore/keystore.cpp in Android before version 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert operation.
In Android 5.x before version 5.1.1 LMY48M, the password entry input field in the lockscreen does not restrict the number of characters, allowing physically proximate attackers to bypass intended access restrictions via a long password that triggers a SystemUI crash.
The checkDestination function in SMSDispatcher.java in Android before version 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, allowing attackers to bypass an intended user-confirmation requirement for SMS short-code messaging via a crafted application.
The Region_createFromParcel function in Android before version 5.1.1 LMY48M does not check the return values of certain read operations, allowing attackers to execute arbitrary code via an application sending a crafted message to a service.
The SIM Toolkit (STK) framework in Android before 5.1.1 LMY48I allows attackers to intercept or emulate unspecified Telephony STK SIM commands via an application that sends a crafted Intent.
Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application.
The OpenSSLX509Certificate class in Android before version 5.1.1 LMY48I improperly includes certain context data during serialization and deserialization. This allows attackers to execute arbitrary code via an application that sends a crafted Intent.
The Parse_wave function in the Sonivox DLS-to-EAS converter in Android before version 5.1.1 LMY48I does not reject a negative value for a certain size field, allowing remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted XMF data.
Buffer overflow in the OMXNodeInstance::emptyBuffer function in libstagefright in Android before version 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application.
Multiple integer overflows in the BnHDCP::onTransact function in IHDCP.cpp in libstagefright in Android before version 5.1.1 LMY48I may allow attackers to execute arbitrary code via a crafted application using HDCP encryption, leading to a heap-based buffer overflow.
Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before version 5.1.1 LMY48I allow remote attackers to execute arbitrary code via invalid size values of NAL units in MP4 data.
Buffer overflow in the readAt function in BpMediaHTTPConnection in the mediaserver service in Android before version 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application.
Off-by-one error in the MPEG4Extractor::parseChunk function in libstagefright in Android before version 5.1.1 LMY48I allows remote attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 covr atoms with a size equal to SIZE_MAX.
The MPEG4Extractor::parse3GPPMetaData function in libstagefright in Android before version 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark (BOM). This allows remote attackers to execute arbitrary code or cause a denial of service via crafted 3GPP metadata.
The MPEG4Extractor::parseChunk function in libstagefright in Android before version 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes, allowing remote attackers to execute arbitrary code or cause a denial of service.