Vendor
Qualcomm: actively exploited vulnerabilities
12 vulnerabilities in Qualcomm products are listed in CISA’s catalog of actively exploited vulnerabilities. Latest addition on March 3, 2026: CVE-2026-21385 (Multiple Chipsets).
- 12 exploited vulnerabilities in the catalog
- 1 added in the last 12 months
- 0 used by ransomware
- 2 products affected
Affected products
- Multiple Chipsets11
- Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables1
All exploited vulnerabilities
CISA KEV catalog, newest first: each entry corresponds to observed exploitation.
2026 1 vulnerability
-
CVE-2026-21385Qualcomm Multiple Chipsets Memory Corruption Vulnerability
2025 3 vulnerabilities
-
CVE-2025-27038Qualcomm Multiple Chipsets Use-After-Free Vulnerability
-
CVE-2025-21480Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
-
CVE-2025-21479Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
2024 1 vulnerability
-
CVE-2024-43047Qualcomm Multiple Chipsets Use-After-Free Vulnerability
2023 4 vulnerabilities
-
CVE-2023-33107Qualcomm Multiple Chipsets Integer Overflow Vulnerability
-
CVE-2023-33106Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
-
CVE-2023-33063Qualcomm Multiple Chipsets Use-After-Free Vulnerability
-
CVE-2022-22071Qualcomm Multiple Chipsets Use-After-Free Vulnerability
2021 3 vulnerabilities
-
CVE-2020-11261Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
-
CVE-2021-1906Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
-
CVE-2021-1905Qualcomm Multiple Chipsets Use-After-Free Vulnerability
What to do
If your estate includes any of these products, make sure the vendor’s patches are applied, starting with the most recent vulnerabilities and those used by ransomware, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed.
Additions from all vendors are tracked on the Actively exploited vulnerabilities page, updated several times a day. Sources: CISA KEV catalog (US public domain) and CERT-FR.