CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application.
The MediaTek hardware sensor driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application.
The Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application.
The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application.
The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application.
The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application.
The Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles userspace data copying, allowing attackers to gain privileges via a crafted application.
The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X, Nexus 6, Nexus 6P, Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application.
MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application.
MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application.
MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application.
MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application.
MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application.
The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application.
The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 (2013) allows attackers to gain privileges via a crafted application.
The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application.
The MPEG4Extractor.cpp in libstagefright in mediaserver in Android before version 4.4.4, 5.0.2, 5.1.1, and 6.x before July 1, 2016, does not check if memory allocation succeeds. This allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file.
The decoder/impeg2d_bitstream.c file in mediaserver in Android 6.x before 2016-07-01 contains a vulnerability that allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted application.
The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before July 1, 2016, allows attackers to gain privileges via a crafted application that uses the AF_MSM_IPC socket class or another socket class that is unrecognized by SELinux.
Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before July 1, 2016 allows local users to gain privileges by establishing a pairing that remains present during a session of the primary user.