CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with improper length checking in an HCI command.
All Qualcomm products with Android releases from CAF using the Linux kernel may consume excessive amounts of memory when downloading a file.
All Qualcomm products with Android releases from CAF using the Linux kernel have a configuration vulnerability when loading a 3rd-party QTEE application.
All Qualcomm products with Android releases from CAF using the Linux kernel may be vulnerable to an assertion that could be reachable in a handover scenario.
All Qualcomm products with Android releases from CAF using the Linux kernel have an array index out of bounds vulnerability in LPP.
All Qualcomm products with Android releases from CAF using the Linux kernel have a use-after-free vulnerability in IMS RCS.
All Qualcomm products with Android releases from CAF using the Linux kernel may have a reachable assertion in a WLAN driver ioctl.
All Qualcomm products with Android releases from CAF using the Linux kernel have insufficient access control to the I2C bus.
All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to an issue where the UE can send unprotected MeasurementReports revealing UE location.
All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to revealing the end user's (UE) location through unprotected MeasurementReports.
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with improper validation of an argument passed to a hypervisor function.
All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow vulnerability in the hypervisor.
All Qualcomm products with Android releases from CAF using the Linux kernel may be vulnerable to the use of an out-of-range pointer offset in LTE.
All Qualcomm products with Android releases from CAF using the Linux kernel have a memory leak issue caused by SSL handshake failure when the client rejects ClientHello.
In Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall.
In Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall.
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer over-read vulnerability in a TrustZone syscall.
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer over-read vulnerability in a TrustZone syscall.
All Qualcomm products with Android releases from CAF using the Linux kernel may have a corrupted Secure File System.
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with improper validation of an argument in the mink syscall.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

