CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Integer overflow in diag_dci.c in Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges or obtain sensitive information via a crafted application.
Buffer overflow in drivers/media/radio/radio-iris.c in Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices, there is a bug in the integer data type in drivers/media/radio/radio-iris.c. This allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices, VEN_IOCTL_GET_SEQUENCE_HDR ioctl calls are not validated in venc.c. This allows attackers to gain privileges via a crafted application.
The mdss mdp3 driver in Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate user-space data, allowing attackers to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 5 devices, there is a vulnerability that does not reject kernel-space buffer addresses, allowing attackers to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, there is a flaw in handling a user-space pointer, allowing attackers to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices, there is a bug in handling certain integer values, allowing attackers to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices, a vulnerability allows attackers to gain privileges via a crafted application that sends short DCI request packets.
Buffer overflow in Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application.
An integer underflow in diag_dci.c in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges or obtain sensitive information via a crafted application.
The diag driver in Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, allowing attackers to gain privileges via a crafted application.
Multiple buffer overflows in Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application.
The Linux kernel before 3.11 on ARM platforms, used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly consider user-space access to the TPIDRURW register, allowing local users to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, certain index values are not validated, allowing attackers to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, a vulnerability allows attackers to gain privileges via an application that provides a crafted mask value.
In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, a vulnerability exists that does not validate the number of streams. This allows attackers to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, a vulnerability exists that does not validate a certain parameter. This allows attackers to gain privileges via a crafted application.
The Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices do not properly restrict user-space input, allowing attackers to gain privileges via a crafted application.
In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, ioctl calls are not validated, allowing attackers to gain privileges via a crafted application.