CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.29)
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in 1x call processing.
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with a pointer not being validated prior to being dereferenced, potentially leading to Guest-OS memory corruption.
Kguard Digital Video Recorder 104, 108, v2 lacks any authorization or authentication between an ActiveX client and the application server.
All Qualcomm products with Android releases from CAF using the Linux kernel include insecure ciphersuites in the default configuration.
All Qualcomm products with Android releases from CAF using the Linux kernel have insufficient validation of filesystem access.
All Qualcomm products with Android releases from CAF using the Linux kernel have insufficient overflow checks in the USB interface during boot.
All Qualcomm products with Android releases from CAF using the Linux kernel have a Sample App that fails to check a length, potentially leading to unauthorized access to secure memory.
All Qualcomm products with Android releases from CAF using the Linux kernel have an uninitialized variable in a TrustZone system call, potentially leading to the compromise of secure memory.
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in a QTEE service.
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in PlayReady DRM.
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in 1x call processing.
All Qualcomm products with Android releases from CAF using the Linux kernel may be vulnerable to a rollback vulnerability in Full Disk Encryption.
All Qualcomm products with Android releases from CAF using the Linux kernel have a lack of buffer length validation in Keymaster.
All Qualcomm products with Android releases from CAF using the Linux kernel have a missing buffer length validation in a PlayReady DRM routine.
All Qualcomm products with Android releases from CAF using the Linux kernel may experience an issue with disabling asserts, potentially leading to a NULL pointer dereference during an out-of-memory condition.
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue where disabling asserts causes an instruction inside of an assert to not be executed, resulting in incorrect control flow.
All Qualcomm products with Android releases from CAF using the Linux kernel may use an insecure cryptographic algorithm in the GPS client.
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in the UIMDIAG interface.
In Qualcomm products with Android releases from CAF, there is a potential for an out-of-range pointer offset to be exploited in rollback protection.
SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.

