[ Vendor · 16 CVEs ]
Qualcomm
CVEs affecting Qualcomm published in the last 30 days, plus any Qualcomm CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-21385 | 2 Mar 2026 | CVSS 7.8 | Qualcomm Multiple Chipsets Memory CorruptionMemory corruption while using alignments for memory allocation. | ExploitedFix |
| CVE-2025-21479 | 3 Jun 2025 | CVSS 8.6 | Qualcomm Multiple Chipsets Incorrect AuthorizationMemory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. | Exploited |
| CVE-2025-27038 | 3 Jun 2025 | CVSS 7.5 | Qualcomm Multiple Chipsets Use-After-FreeMemory corruption while rendering graphics using Adreno GPU drivers in Chrome. | Exploited |
| CVE-2025-21480 | 3 Jun 2025 | CVSS 8.6 | Qualcomm Multiple Chipsets Incorrect AuthorizationMemory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. | Exploited |
| CVE-2024-43047 | 7 Oct 2024 | CVSS 7.8 | Qualcomm Multiple Chipsets Use-After-FreeMemory corruption while maintaining memory maps of HLOS memory. | ExploitedFix |
| CVE-2024-43047 | 7 Oct 2024 | CVSS 7.8 | Qualcomm Multiple Chipsets Use-After-FreeMemory corruption while maintaining memory maps of HLOS memory. | ExploitedFix |
| CVE-2023-33106 | 5 Dec 2023 | CVSS 7.8 | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer OffsetMemory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. | ExploitedFix |
| CVE-2023-33106 | 5 Dec 2023 | CVSS 7.8 | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer OffsetMemory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. | ExploitedFix |
| CVE-2023-33107 | 5 Dec 2023 | CVSS 7.8 | Qualcomm Multiple Chipsets Integer OverflowMemory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. | ExploitedFix |
| CVE-2023-33107 | 5 Dec 2023 | CVSS 7.8 | Qualcomm Multiple Chipsets Integer OverflowMemory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. | ExploitedFix |
| CVE-2023-33063 | 5 Dec 2023 | CVSS 7.8 | Qualcomm Multiple Chipsets Use-After-FreeMemory corruption in DSP Services during a remote call from HLOS to DSP. | ExploitedFix |
| CVE-2023-33063 | 5 Dec 2023 | CVSS 7.8 | Qualcomm Multiple Chipsets Use-After-FreeMemory corruption in DSP Services during a remote call from HLOS to DSP. | ExploitedFix |
| CVE-2022-22071 | 14 Jun 2022 | CVSS 7.8 | Qualcomm Multiple Chipsets Use-After-FreePossible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto… | ExploitedFix |
| CVE-2020-11261 | 9 Jun 2021 | CVSS 7.8 | Qualcomm Multiple Chipsets Improper Input ValidationMemory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto… | ExploitedFix |
| CVE-2021-1905 | 7 May 2021 | CVSS 7.8 | Qualcomm Multiple Chipsets Use-After-FreePossible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute… | ExploitedFix |
| CVE-2021-1906 | 7 May 2021 | CVSS 5.5 | Qualcomm Multiple Chipsets Detection of Error Condition Without ActionImproper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute… | ExploitedFix |