Vendor
Qualcomm, Inc.
2,988 known vulnerabilities in products by Qualcomm, Inc., 12 of them actively exploited (CISA KEV).
Key figures
2,988
Vulnerabilities
12
Actively exploited (KEV)
0
Used by ransomware
678
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2026-21385 | Integer Overflow or Wraparound in Graphics In CISA KEV | 7.8 | |
| Critical | CVE-2021-1905 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability In CISA KEV | 8.4 | |
| Critical | CVE-2020-11261 | Qualcomm Multiple Chipsets Improper Input Validation Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2025-21479 | Incorrect Authorization in Graphics In CISA KEV | 8.6 | |
| Critical | CVE-2025-27038 | Use After Free in Graphics In CISA KEV | 7.5 | |
| Critical | CVE-2023-33106 | Use of Out-of-range Pointer Offset in Graphics In CISA KEV | 8.4 | |
| Critical | CVE-2023-33107 | Integer Overflow or Wraparound in Graphics Linux In CISA KEV | 8.4 | |
| Critical | CVE-2024-43047 | Use After Free in DSP Service In CISA KEV | 7.8 | |
| Critical | CVE-2025-21480 | Incorrect Authorization in Graphics Windows In CISA KEV | 8.6 | |
| Critical | CVE-2023-33063 | Use After Free in DSP Services In CISA KEV | 7.8 | |
| Critical | CVE-2022-22071 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability In CISA KEV | 8.4 | |
| Critical | CVE-2021-1906 | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability In CISA KEV | 6.2 | |
| Critical | CVE-2020-3657 | Qualcomm Apq8009 Firmware: Remote Code Execution | 9.8 | |
| Critical | CVE-2020-11117 | Qualcomm IPQ4019 Firmware: Remote Code Execution | 9.8 | |
| Critical | CVE-2020-11264 | Qualcomm APQ8053 Firmware: Improper Authentication | 9.1 | |
| Critical | CVE-2020-11301 | Qualcomm Apq8009 Firmware: Improper Authentication | 9.1 | |
| Critical | CVE-2021-30351 | Qualcomm Apq8009 Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2017-8248 | Qualcomm Telephony: Buffer Overflow | 9.8 | |
| Critical | CVE-2021-1965 | Qualcomm Aqt1000 Firmware: Buffer Overflow | 9.8 | |
| Critical | CVE-2020-11153 | Qualcomm APQ8053 Firmware: Remote Code Execution | 9.8 | |
| High | CVE-2015-9222 | Qualcomm MSM8909w Firmware: Infinite Loop | 7.5 | |
| Critical | CVE-2017-14911 | Qualcomm APQ8096AU Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2017-14913 | Qualcomm Mdm9206 Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2017-14912 | Qualcomm Mdm9206 Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2017-14915 | Qualcomm Snapdragon Mobile: Use-After-Free | 9.8 |