Cyberfeed6 › Vendors › Qualcomm
CISA lists 12 Qualcomm vulnerabilities as exploited in real attacks. Most entries concern Multiple Chipsets, Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables.
Showing the 12 most recently added of 12. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2026-21385Qualcomm Multiple Chipsets Memory Corruption Vulnerability | Multiple Chipsets | 2026-03-03 | High (7.8) | No | Vendor notice |
| CVE-2025-27038Qualcomm Multiple Chipsets Use-After-Free Vulnerability | Multiple Chipsets | 2025-06-03 | High (7.5) | No | Vendor notice |
| CVE-2025-21480Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | Multiple Chipsets | 2025-06-03 | High (8.6) | No | Vendor notice |
| CVE-2025-21479Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | Multiple Chipsets | 2025-06-03 | High (8.6) | No | Vendor notice |
| CVE-2024-43047Qualcomm Multiple Chipsets Use-After-Free Vulnerability | Multiple Chipsets | 2024-10-08 | High (7.8) | No | Vendor notice |
| CVE-2023-33107Qualcomm Multiple Chipsets Integer Overflow Vulnerability | Multiple Chipsets | 2023-12-05 | High (8.4) | No | Vendor notice |
| CVE-2023-33106Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | Multiple Chipsets | 2023-12-05 | High (8.4) | No | Vendor notice |
| CVE-2023-33063Qualcomm Multiple Chipsets Use-After-Free Vulnerability | Multiple Chipsets | 2023-12-05 | High (7.8) | No | Vendor notice |
| CVE-2022-22071Qualcomm Multiple Chipsets Use-After-Free Vulnerability | Multiple Chipsets | 2023-12-05 | High (8.4) | No | Vendor notice |
| CVE-2020-11261Qualcomm Multiple Chipsets Improper Input Validation Vulnerability | Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 2021-12-01 | High (7.8) | No | |
| CVE-2021-1906Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability | Multiple Chipsets | 2021-11-03 | Medium (6.2) | No | |
| CVE-2021-1905Qualcomm Multiple Chipsets Use-After-Free Vulnerability | Multiple Chipsets | 2021-11-03 | High (8.4) | No |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.