CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.29)
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability in the GERAN API.
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability in eMBMS where an assertion can be reached by a sequence of downlink messages.
All Qualcomm products with Android releases from CAF using the Linux kernel may have a NULL pointer dereference issue in the front end.
All Qualcomm products with Android releases from CAF using the Linux kernel may be susceptible to buffer over-read during the processing of a downlink 3G NAS message.
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with an incorrect length used to clear a memory buffer, resulting in adjacent memory getting corrupted.
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with failing to free a memory buffer after it is no longer needed, potentially leading to memory exhaustion.
All Qualcomm products with Android releases from CAF using the Linux kernel may have an issue with a string failing to be null-terminated in SIP, leading to a buffer overflow.
All Qualcomm products with Android releases from CAF using the Linux kernel lack buffer length validation in malware protection.
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer over-read vulnerability in digital television/digital radio DRM.
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer over-read vulnerability in RFA-1x.
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in 1x call processing.
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with a pointer not being validated prior to being dereferenced, potentially leading to Guest-OS memory corruption.
Kguard Digital Video Recorder 104, 108, v2 lacks any authorization or authentication between an ActiveX client and the application server.
All Qualcomm products with Android releases from CAF using the Linux kernel include insecure ciphersuites in the default configuration.
All Qualcomm products with Android releases from CAF using the Linux kernel have insufficient validation of filesystem access.
All Qualcomm products with Android releases from CAF using the Linux kernel have insufficient overflow checks in the USB interface during boot.
All Qualcomm products with Android releases from CAF using the Linux kernel have a Sample App that fails to check a length, potentially leading to unauthorized access to secure memory.
All Qualcomm products with Android releases from CAF using the Linux kernel have an uninitialized variable in a TrustZone system call, potentially leading to the compromise of secure memory.
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in a QTEE service.
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in PlayReady DRM.

