Qualcomm known exploited vulnerabilities
Every Qualcomm CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 12 in all, 1 added in the last 12 months.
- CVE-2026-21385Integer Overflow or Wraparound in GraphicsQualcomm Snapdragon
- CVE-2025-27038Use After Free in GraphicsQualcomm Snapdragon
- CVE-2025-21480Incorrect Authorization in Graphics WindowsQualcomm Snapdragon
- CVE-2025-21479Incorrect Authorization in GraphicsQualcomm Snapdragon
- CVE-2024-43047Use After Free in DSP ServiceQualcomm Snapdragon
- CVE-2023-33107Integer Overflow or Wraparound in Graphics LinuxQualcomm Snapdragon
- CVE-2023-33106Use of Out-of-range Pointer Offset in GraphicsQualcomm Snapdragon
- CVE-2023-33063Use After Free in DSP ServicesQualcomm Snapdragon
- CVE-2022-22071Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon AQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11261Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1905Possible use after free due to improper handling of memory mapping of multiple processes simultaneously.Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1906Improper handling of address deregistration on failure can lead to new GPU address allocation failure.Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
Get alerts for new known exploited vulnerabilities
Only want the packages you use? Check a lockfile to get a feed for your stack.
https://cve.now/kev/feed
Paste into Feedly or any RSS reader, or run /feed subscribe https://cve.now/kev/feed in Slack. For email alerts, give it to an RSS-to-email service.
https://cve.now/kev/feed?format=atom
The same entries as Atom, for readers that prefer it.
https://cve.now/kev/feed?format=json
The same entries as JSON Feed 1.1, for scripts and readers that support it.
https://cve.now/api/v1/entries?filter=kev
Pages of 30 entries, newest first. Pass the response's next_cursor as cursor for the next page.
Frequently asked questions
How many Qualcomm vulnerabilities are in CISA KEV?
12 Qualcomm vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 1 of them added in the last 12 months. The newest is CVE-2026-21385 (Qualcomm Multiple Chipsets Memory Corruption Vulnerability), added 2026-03-03.
Which Qualcomm products are in CISA KEV?
2 products, including Multiple Chipsets, Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Qualcomm KEV vulnerabilities used by ransomware?
CISA has no known ransomware use on record for Qualcomm's KEV entries.