Vendor
Qualcomm
As of , 12 Qualcomm vulnerabilities are on CISA's list of exploited vulnerabilities; 1 was added in 2026. Patch first: CVE-2020-11261.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2020-11261Multiple Chipsets Improper Input Validation | Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | Patch soon | 0.02 | ||
| 2 | CVE-2021-1905Use-After-Free | Qualcomm Multiple Chipsets | Patch soon | 0.02 | ||
| 3 | CVE-2026-21385Memory Corruption | Qualcomm Multiple Chipsets | Patch soon | 0.01 | ||
| 4 | CVE-2025-27038Use-After-Free | Qualcomm Multiple Chipsets | Patch soon | 0.01 | ||
| 5 | CVE-2025-21479Incorrect Authorization | Qualcomm Multiple Chipsets | Patch soon | 0.01 | ||
| 6 | CVE-2023-33106Use of Out-of-Range Pointer Offset | Qualcomm Multiple Chipsets | Patch soon | 0.01 | ||
| 7 | CVE-2023-33107Integer Overflow | Qualcomm Multiple Chipsets | Patch soon | 0.01 | ||
| 8 | CVE-2024-43047Use-After-Free | Qualcomm Multiple Chipsets | Patch soon | 0.01 | ||
| 9 | CVE-2023-33063Use-After-Free | Qualcomm Multiple Chipsets | Patch soon | 0.01 | ||
| 10 | CVE-2021-1906Detection of Error Condition Without Action | Qualcomm Multiple Chipsets | Patch soon | 0.01 | ||
| 11 | CVE-2025-21480Incorrect Authorization | Qualcomm Multiple Chipsets | Patch soon | 0.00 | ||
| 12 | CVE-2022-22071Use-After-Free | Qualcomm Multiple Chipsets | Patch soon | 0.00 |
Products
- Multiple Chipsets11 entries
- Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables1 entry
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 3 |
| 2022 | none |
| 2023 | 4 |
| 2024 | 1 |
| 2025 | 3 |
| 2026 | 1 |