Skip to content
English

Products › Brands

Brand

Qualcomm: actively exploited vulnerabilities

13 vulnerabilities in Qualcomm products (Snapdragon (chipsets and drivers)) are in CISA’s catalog of exploited vulnerabilities. Last added: March 3, 2026.

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Qualcomm category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Snapdragon (chipsets and drivers) 13 vulnerabilities · Phones and tablets

Names used by CISA: Code Aurora, Qualcomm. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Qualcomm list.

  1. Rank 1Qualcomm Snapdragon (chipsets and drivers)

    CVE-2026-21385

    Qualcomm Multiple Chipsets Memory Corruption Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 3, 2026
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)
  2. Rank 2Qualcomm Snapdragon (chipsets and drivers)

    CVE-2025-21479

    Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 3, 2025
    CISA deadline
    21 days
    CVSS severity
    8.6 (high)
  3. Rank 3Qualcomm Snapdragon (chipsets and drivers)

    CVE-2025-21480

    Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 3, 2025
    CISA deadline
    21 days
    CVSS severity
    8.6 (high)
  4. Rank 4Qualcomm Snapdragon (chipsets and drivers)

    CVE-2013-2597

    CVE from 2013, added in 2022

    Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 15, 2022
    CISA deadline
    21 days
    CVSS severity
    8.4 (high)
  5. Rank 5Qualcomm Snapdragon (chipsets and drivers)

    CVE-2024-43047

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 8, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)
  6. Rank 6Qualcomm Snapdragon (chipsets and drivers)

    CVE-2022-22071

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 5, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)
  7. Rank 7Qualcomm Snapdragon (chipsets and drivers)

    CVE-2023-33063

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 5, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)
  8. Rank 8Qualcomm Snapdragon (chipsets and drivers)

    CVE-2023-33106

    Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 5, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)
  9. Rank 9Qualcomm Snapdragon (chipsets and drivers)

    CVE-2023-33107

    Qualcomm Multiple Chipsets Integer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 5, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)
  10. Rank 10Qualcomm Snapdragon (chipsets and drivers)

    CVE-2020-11261

    Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 1, 2021
    CISA deadline
    182 days
    CVSS severity
    7.8 (high)
Show 3 more vulnerabilities
  1. Rank 11Qualcomm Snapdragon (chipsets and drivers)

    CVE-2021-1905

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)
  2. Rank 12Qualcomm Snapdragon (chipsets and drivers)

    CVE-2025-27038

    Qualcomm Multiple Chipsets Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 3, 2025
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)
  3. Rank 13Qualcomm Snapdragon (chipsets and drivers)

    CVE-2021-1906

    Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    5.5 (medium)

Follow and verify

Get new Qualcomm vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.