Vendor
Qualcomm
12 of 13 Qualcomm CVEs in Patchfirst (92%) are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it. of vulnerabilities exploited in the wild.
- CVEs
- 13
- In CISA KEV
- 1292%
- Known ransomware use
- 0
- Median days to KEV
- 0
- from publication
- Latest KEV listing
- 3 Mar 2026
Products
In KEVOther CVEs
- Multiple Chipsets In KEV: 11 CVEs: 11
- Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables In KEV: 1 CVEs: 1
- Snapdragon In KEV: 0 CVEs: 1
Top ATT&CK techniques
What attackers do with Qualcomm CVEs- T1068Exploitation for Privilege Escalation CVEs: 10
- T1203Exploitation for Client Execution CVEs: 3
- T1204.002Malicious File CVEs: 2
- T1059Command and Scripting Interpreter CVEs: 2
- T1055Process Injection CVEs: 1
Counts are Qualcomm CVEs linked to the technique. Each link’s provenance is on the CVE page.
Qualcomm CVEs
13 CVEs, by priority- CVE-2026-21385Qualcomm Multiple Chipsets Memory Corruption VulnerabilityQualcomm · Multiple ChipsetsKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation1.3%Top 29%67.6priority
- CVE-2025-21479Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityQualcomm · Multiple ChipsetsKEVPublic exploitHigh · 8.6T1204.002Malicious FileT1068Exploitation for Privilege Escalation0.8%Top 44%60.2priority
- CVE-2023-33107Qualcomm Multiple Chipsets Integer Overflow Vulnerability0.7%Top 45%59.4priority
- CVE-2020-11261Qualcomm Multiple Chipsets Improper Input Validation VulnerabilityQualcomm · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesKEVHigh · 7.8T1068Exploitation for Privilege Escalation1.6%Top 24%58.6priority
- CVE-2021-1905Qualcomm Multiple Chipsets Use-After-Free VulnerabilityQualcomm · Multiple ChipsetsKEVHigh · 7.8T1203Exploitation for Client ExecutionT1068Exploitation for Privilege Escalation1.5%Top 25%58.4priority
- CVE-2025-27038Qualcomm Multiple Chipsets Use-After-Free VulnerabilityQualcomm · Multiple ChipsetsKEVHigh · 7.5T1203Exploitation for Client ExecutionT1059Command and Scripting Interpreter1.0%Top 36%56.1priority
- CVE-2023-33106Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset VulnerabilityQualcomm · Multiple ChipsetsKEVHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation0.8%Top 44%54.7priority
- CVE-2024-43047Qualcomm Multiple Chipsets Use-After-Free Vulnerability0.7%Top 48%53.9priority
- CVE-2023-33063Qualcomm Multiple Chipsets Use-After-Free VulnerabilityQualcomm · Multiple ChipsetsKEVHigh · 7.8T1203Exploitation for Client ExecutionT1068Exploitation for Privilege Escalation0.7%Top 48%53.9priority
- CVE-2025-21480Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability0.4%Top 63%51.4priority
- CVE-2024-45569Improper Validation of Array Index in WLAN Host CommunicationQualcomm, Inc. · SnapdragonCritical · 9.80.6%Top 53%51.4priority
- CVE-2021-1906Qualcomm Multiple Chipsets Detection of Error Condition Without Action VulnerabilityQualcomm · Multiple ChipsetsKEVMedium · 5.5T1068Exploitation for Privilege EscalationT1499Endpoint Denial of Service0.5%Top 56%50.7priority
- CVE-2022-22071Qualcomm Multiple Chipsets Use-After-Free Vulnerability0.4%Top 65%50.5priority