Qualcomm
Vulnerability activity for Qualcomm: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 12
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 1
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 7.8HighMar 3, 2026Qualcomm Multiple Chipsets Memory corruptionCVE-2026-21385Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation. Added to KEV Mar 3, 2026Exploited1.3% likely
- 7.5HighJun 3, 2025Qualcomm Multiple Chipsets Memory corruptionCVE-2025-27038Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.Added to KEV Jun 3, 2025 · same day as publicationExploited1.1% likely
- 8.6HighJun 3, 2025Qualcomm Multiple Chipsets Auth bypass / access controlCVE-2025-21480Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.Added to KEV Jun 3, 2025 · same day as publicationExploited
- 8.6HighJun 3, 2025Qualcomm Multiple Chipsets Auth bypass / access controlCVE-2025-21479Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.Added to KEV Jun 3, 2025 · same day as publicationExploited
- 7.8HighOct 7, 2024Qualcomm Multiple Chipsets Memory corruptionCVE-2024-43047Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory. Added to KEV Oct 8, 2024 · same day as publicationExploited
- 8.4HighJun 14, 2022Qualcomm Multiple Chipsets Memory corruptionCVE-2022-22071Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.Added to KEV Dec 5, 2023 · 539 days after publicationExploited
- 7.8HighDec 5, 2023Qualcomm Multiple Chipsets Memory corruptionCVE-2023-33063Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.Added to KEV Dec 5, 2023 · same day as publicationExploited
- 8.4HighDec 5, 2023Qualcomm Multiple ChipsetsCVE-2023-33106Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.Added to KEV Dec 5, 2023 · same day as publicationExploited
- 8.4HighDec 5, 2023Qualcomm Multiple Chipsets Memory corruptionCVE-2023-33107Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.Added to KEV Dec 5, 2023 · same day as publicationExploited
- 7.8HighJun 9, 2021Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, SnapdrCVE-2020-11261Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesAdded to KEV Dec 1, 2021 · 175 days after publicationExploited1.6% likely
- 8.4HighMay 7, 2021Qualcomm Multiple Chipsets Memory corruptionCVE-2021-1905Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultaneously.Added to KEV Nov 3, 2021 · 180 days after publicationExploited1.5% likely
- 6.2MediumMay 7, 2021Qualcomm Multiple ChipsetsCVE-2021-1906Multiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address deregistration on failure can lead to new GPU address allocation failure.Added to KEV Nov 3, 2021 · 180 days after publicationExploited
Recent
- 7.8HighJul 6, 2026Qualcomm cologne firmware Memory corruptionCVE-2026-25271Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.
- 8.8HighJul 6, 2026Qualcomm wsa8835 firmware Memory corruptionCVE-2026-25268Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
- 5.3MediumJul 6, 2026Qualcomm fastconnect 6700 firmware Memory corruptionCVE-2026-21384Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.
- 7.1HighJul 6, 2026Qualcomm fastconnect 6900 firmware Crypto / certificateCVE-2026-21383Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
- 7.8HighJul 6, 2026Qualcomm aqt1000 firmware Memory corruptionCVE-2026-21379Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.
- 5.3MediumJul 6, 2026Qualcomm fastconnect 6700 firmware Memory corruptionCVE-2026-21370Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.
- 5.3MediumJul 6, 2026Qualcomm fastconnect 6200 firmware Memory corruptionCVE-2026-21369Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.
- 5.3MediumJul 6, 2026Qualcomm fastconnect 6700 firmware Memory corruptionCVE-2026-21368Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.
- 7.8HighApr 6, 2026Qualcomm cologne firmware Memory corruptionCVE-2026-21382Memory Corruption when handling power management requests with improperly sized input/output buffers.
- 7.8HighApr 6, 2026Qualcomm cologne firmware Memory corruptionCVE-2026-21380Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.
- 7.8HighApr 6, 2026Qualcomm x2000094 firmware Memory corruptionCVE-2026-21372Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.
- 7.8HighMar 3, 2026Qualcomm Multiple Chipsets Memory corruptionCVE-2026-21385Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation. Exploited1.3% likely
- 8.6HighJun 3, 2025Qualcomm Multiple Chipsets Auth bypass / access controlCVE-2025-21479Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.Exploited
- 7.5HighJun 3, 2025Qualcomm Multiple Chipsets Memory corruptionCVE-2025-27038Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.Exploited1.1% likely
- 8.6HighJun 3, 2025Qualcomm Multiple Chipsets Auth bypass / access controlCVE-2025-21480Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.Exploited
- 7.8HighOct 7, 2024Qualcomm Multiple Chipsets Memory corruptionCVE-2024-43047Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory. Exploited
- 8.4HighDec 5, 2023Qualcomm Multiple Chipsets Memory corruptionCVE-2023-33107Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.Exploited
- 8.4HighDec 5, 2023Qualcomm Multiple ChipsetsCVE-2023-33106Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.Exploited
- 7.8HighDec 5, 2023Qualcomm Multiple Chipsets Memory corruptionCVE-2023-33063Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.Exploited
- 8.4HighJun 14, 2022Qualcomm Multiple Chipsets Memory corruptionCVE-2022-22071Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.Exploited
- 7.8HighJun 9, 2021Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, SnapdrCVE-2020-11261Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesExploited1.6% likely
- 6.2MediumMay 7, 2021Qualcomm Multiple ChipsetsCVE-2021-1906Multiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address deregistration on failure can lead to new GPU address allocation failure.Exploited
- 8.4HighMay 7, 2021Qualcomm Multiple Chipsets Memory corruptionCVE-2021-1905Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultaneously.Exploited1.5% likely
Top products
- fastconnect 6700 firmware3 CVEs in the last year
- cologne firmware3 CVEs in the last year
- x2000094 firmware1 CVE in the last year
- wsa8835 firmware1 CVE in the last year
- Multiple Chipsets1 CVE in the last year, 1 exploited
- fastconnect 6900 firmware1 CVE in the last year
- fastconnect 6200 firmware1 CVE in the last year
- aqt1000 firmware1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.