CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices. The impact and attack vectors are unknown.
Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices. Impact and attack vectors are unknown.
The RilSapSocket.cpp file in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 relies on variable-length arrays, allowing attackers to gain privileges via a crafted application.
The Framework Listener in Android versions before 4.4.4, 5.0.2, 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 has a vulnerability that allows attackers to gain privileges via a crafted application.
The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process. This allows physically proximate attackers to authenticate as an arbitrary user by leveraging lockscreen access.
A vulnerability in the Camera service in Android allows attackers to gain privileges via a crafted application. This affects Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01.
A vulnerability in the Camera service in Android allows attackers to gain privileges via a crafted application. This affects Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01.
A race condition exists in MmsProvider.java in Android, allowing attackers to gain privileges via a crafted application that modifies a database between two open operations.
In Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01, there is a vulnerability related to the lack of validation of a static_cast operation in MediaPlayerService.cpp, allowing attackers to gain privileges via a crafted application.
The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allow attackers to gain privileges via a crafted application.
In Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01, there is a vulnerability in the Process class in the Zygote module that allows attackers to gain privileges via a crafted application.
In the SoundTriggerHwService in mediaserver in Android before version 5.0.2, 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01, a vulnerability allows attackers to gain privileges via a crafted application.
The SoftMPEG4 component in libstagefright in mediaserver in Android before version 4.4.4, 5.0.2, 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application.
The Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices has a vulnerability that allows attackers to gain privileges via a crafted application sending a SENDACTIONFRAME command.
The Qualcomm camera driver in Android before 2016-10-05 contains a vulnerability that allows attackers to gain privileges via a crafted application. This affects Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices.
Multiple integer overflows in the Qualcomm cryptographic engine driver in Android before 2016-10-05 allow attackers to gain privileges via a crafted application.
The ServiceManager in Android has a vulnerability that improperly restricts service registration. This allows attackers to gain privileges via a crafted application.
The Linux kernel before version 4.1 on arm64 platforms has a vulnerability that allows local users to gain privileges or cause a denial of service through mishandled events involving multiple HW PMUs.
Multiple use-after-free vulnerabilities in the Qualcomm sound driver in Android before 2016-10-05 may allow attackers to gain privileges via a crafted application.
Multiple race conditions in the ADSPRPC drivers for Linux kernel 3.x can lead to denial of service or other unspecified impacts. Attackers can exploit the COMPAT_FASTRPC_IOCTL_INVOKE_FD ioctl call to trigger a zero-value write.