CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Qualcomm camera driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application.
libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before June 1, 2016, allows attackers to gain privileges via a crafted application. This can lead to obtaining Signature or SignatureOrSystem access.
In libstagefright in mediaserver in Android, there is a vulnerability that does not validate the relationship between allocated memory and frame size. This allows attackers to gain privileges via a crafted application.
libstagefright in mediaserver in Android versions before 4.4.4, 5.0.2, 5.1.1, and before June 1, 2016, does not validate OMX buffer sizes for GSM and G711 codecs. This allows attackers to gain privileges via a crafted application.
libstagefright in mediaserver in Android versions before 4.4.4, 5.0.2, 5.1.1, and 6.x before June 1, 2016, does not validate OMX buffer sizes for GSM and G711 codecs. This allows attackers to gain privileges via a crafted application.
The mm-video-v4l2 venc component in mediaserver in Android versions before 4.4.4, 5.0.2, 5.1.1, and 6.x before June 1, 2016 mishandles a buffer count, allowing attackers to gain privileges via a crafted application.
The mm-video-v4l2 vdec component in mediaserver in Android before version 4.4.4, 5.0.2, 5.1.1, and 6.x before June 1, 2016 mishandles a buffer count, allowing attackers to gain privileges via a crafted application.
The mm-video-v4l2 venc component in mediaserver in Android before versions 4.4.4, 5.0.2, 5.1.1, and 6.x before June 1, 2016 mishandles a buffer count. This allows attackers to gain privileges via a crafted application.
The mm-video-v4l2 component in mediaserver in Android does not validate certain OMX parameter data structures, allowing attackers to gain privileges via a crafted application.
The mm-video-v4l2 vdec component in mediaserver in Android before version 4.4.4, 5.0.2, 5.1.1, and 6.x before June 1, 2016 mishandles a buffer count, allowing attackers to gain privileges via a crafted application.
The omx_vdec_msm8974.cpp file in mediaserver in Android has a pointer mishandling issue that may allow attackers to gain privileges via a crafted application.
The omx_vdec_msm8974.cpp file in mediaserver in Android has a pointer mishandling issue that allows attackers to gain privileges via a crafted application.
In Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01, the mediaserver component does not validate OMX buffer sizes. This allows attackers to gain privileges via a crafted application.
The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus Player, and Pixel C devices allows attackers to gain privileges for certain system calls via a crafted application.
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 5X devices allows attackers to gain privileges via a crafted application.
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application.
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application.
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application.
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application.
The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5, 6, and 6P devices allows attackers to gain privileges via a crafted application.