Brand
Qualcomm: actively exploited vulnerabilities
13 vulnerabilities in Qualcomm products (Snapdragon (chipsets and drivers)) are in CISA’s catalog of exploited vulnerabilities. Last added: March 3, 2026.
The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).
-
1 vulnerability added in the last 12 months
-
13 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Qualcomm category to your radar, or open its page.
- Phones, tablets and chipsets 13 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Snapdragon (chipsets and drivers) 13 vulnerabilities · Phones and tablets
Names used by CISA: Code Aurora, Qualcomm. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Qualcomm list.
Rank 1Qualcomm Snapdragon (chipsets and drivers)
CVE-2026-21385Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Mar 3, 2026
- CISA deadline
- 21 days
- CVSS severity
- 7.8 (high)
Rank 2Qualcomm Snapdragon (chipsets and drivers)
CVE-2025-21479Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jun 3, 2025
- CISA deadline
- 21 days
- CVSS severity
- 8.6 (high)
Rank 3Qualcomm Snapdragon (chipsets and drivers)
CVE-2025-21480Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jun 3, 2025
- CISA deadline
- 21 days
- CVSS severity
- 8.6 (high)
Rank 4Qualcomm Snapdragon (chipsets and drivers)
CVE-2013-2597CVE from 2013, added in 2022
Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Sep 15, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.4 (high)
Rank 5Qualcomm Snapdragon (chipsets and drivers)
CVE-2024-43047Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Oct 8, 2024
- CISA deadline
- 21 days
- CVSS severity
- 7.8 (high)
Rank 6Qualcomm Snapdragon (chipsets and drivers)
CVE-2022-22071Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Dec 5, 2023
- CISA deadline
- 21 days
- CVSS severity
- 7.8 (high)
Rank 7Qualcomm Snapdragon (chipsets and drivers)
CVE-2023-33063Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Dec 5, 2023
- CISA deadline
- 21 days
- CVSS severity
- 7.8 (high)
Rank 8Qualcomm Snapdragon (chipsets and drivers)
CVE-2023-33106Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Dec 5, 2023
- CISA deadline
- 21 days
- CVSS severity
- 7.8 (high)
Rank 9Qualcomm Snapdragon (chipsets and drivers)
CVE-2023-33107Qualcomm Multiple Chipsets Integer Overflow Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Dec 5, 2023
- CISA deadline
- 21 days
- CVSS severity
- 7.8 (high)
Rank 10Qualcomm Snapdragon (chipsets and drivers)
CVE-2020-11261Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Dec 1, 2021
- CISA deadline
- 182 days
- CVSS severity
- 7.8 (high)
Show 3 more vulnerabilities
Rank 11Qualcomm Snapdragon (chipsets and drivers)
CVE-2021-1905Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 7.8 (high)
Rank 12Qualcomm Snapdragon (chipsets and drivers)
CVE-2025-27038Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jun 3, 2025
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Rank 13Qualcomm Snapdragon (chipsets and drivers)
CVE-2021-1906Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 14 days
- CVSS severity
- 5.5 (medium)
Follow and verify
Get new Qualcomm vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).
Indicative classification, based on the vendor and product names given by CISA. How products are classified.