Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.
Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates
4,319 matching published records · 0 with an unknown publication date
Every segment and month is a link that preserves the other filters.
Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.
Release of Invalid Pointer or Reference in Android Core
Memory corruption while handling invalid inputs in application info setup.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:56.356Z. Updated 2026-02-26T17:48:08.693Z.
Buffer Over-read in WLAN HAL
Transient DOS while processing power control requests with invalid antenna or stream values.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:54.999Z. Updated 2025-09-25T18:34:37.546Z.
Use After Free in Camera
Memory corruption while encoding the image data.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:53.779Z. Updated 2026-02-26T17:48:09.187Z.
Buffer Over-read in WLAN HAL
Transient DOS while handling command data during power control processing.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:52.473Z. Updated 2025-09-25T18:34:13.643Z.
Buffer Over-read in BT Controller
Transient DOS while parsing the EPTM test control message to get the test pattern.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:51.163Z. Updated 2025-09-24T17:28:16.793Z.
Buffer Over-read in BT Controller
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:49.869Z. Updated 2026-02-26T17:48:09.594Z.
Double Free in Video
Memory corruption due to double free when multiple threads race to set the timestamp store.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:48.625Z. Updated 2026-02-26T17:48:10.136Z.
Use After Free in Automotive Software platform based on QNX
Memory corruption while handling repeated memory unmap requests from guest VM.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:47.312Z. Updated 2026-02-26T17:48:10.659Z.
Improper Input Validation in Automotive Software platform based on QNX
Memory corruption while processing data sent by FE driver.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:46.107Z. Updated 2026-02-26T17:48:11.196Z.
Use After Free in Automotive Software platform based on QNX
Memory corruption while processing message in guest VM.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:44.799Z. Updated 2026-02-26T17:48:11.733Z.
Use After Free in Camera Driver
Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:43.572Z. Updated 2026-02-26T17:48:12.296Z.
Buffer Over-read in Video
Information disclosure when Video engine escape input data is less than expected minimum size.
Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:42.243Z. Updated 2025-09-25T13:51:30.067Z.
Improper Validation of Array Index in Multi-Mode Call Processor
Memory corruption while selecting the PLMN from SOR failed list.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:40.998Z. Updated 2026-02-26T17:48:12.776Z.
Buffer Over-read in Video
Information disclosure while running video usecase having rogue firmware.
Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:39.804Z. Updated 2025-09-25T13:51:44.063Z.
Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:38.574Z. Updated 2026-02-26T17:48:13.128Z.
Buffer Over-read in Audio
information disclosure while invoking calibration data from user space to update firmware size.
Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:37.296Z. Updated 2025-09-25T15:49:02.050Z.
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:35.950Z. Updated 2025-09-25T15:49:08.512Z.
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:34.551Z. Updated 2025-09-25T15:49:14.163Z.
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:32.879Z. Updated 2025-09-25T15:49:19.403Z.
Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-09-24T15:33:31.586Z. Updated 2026-02-26T17:48:13.763Z.