Qualcomm flaws being used in attacks

CISA lists 12 flaws in Qualcomm products as being used in attacks, most recently on 3 Mar 2026.

What to do

1. Update every Qualcomm product you use.Install the updates Qualcomm offers, on every device, and restart when asked. Each flaw below has a fix or clear advice; that’s one of CISA’s conditions for listing it.
2. If someone looks after IT for you, send them this page.Many of these are in equipment you don’t see: routers, firewalls, servers, the office network. Ask them to confirm each one is fixed, or that you don’t use the product.
3. Check anything else in the lookup.Search any app, company or CVE. Not being on CISA’s list doesn’t mean safe: keep updating either way.

Every flaw, newest first

1. Being used in attacksAdded by CISA on 3 Mar 2026
   Qualcomm Multiple Chipsets
   CVE-2026-21385Qualcomm Multiple Chipsets Memory Corruption Vulnerability
   Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation.
   CISA’s required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
   CVE recordNVD
2. Being used in attacksAdded by CISA on 3 Jun 2025
   Qualcomm Multiple Chipsets
   CVE-2025-27038Qualcomm Multiple Chipsets Use-After-Free Vulnerability
   Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
   CISA’s required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
   CVE recordNVD
3. Being used in attacksAdded by CISA on 3 Jun 2025
   Qualcomm Multiple Chipsets
   CVE-2025-21480Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
   Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
   CISA’s required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
   CVE recordNVD
4. Being used in attacksAdded by CISA on 3 Jun 2025
   Qualcomm Multiple Chipsets
   CVE-2025-21479Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
   Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
   CISA’s required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
   CVE recordNVD
5. Being used in attacksAdded by CISA on 8 Oct 2024
   Qualcomm Multiple Chipsets
   CVE-2024-43047Qualcomm Multiple Chipsets Use-After-Free Vulnerability
   Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory.
   CISA’s required actionApply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
   CVE recordNVD
6. Being used in attacksAdded by CISA on 5 Dec 2023
   Qualcomm Multiple Chipsets
   CVE-2023-33107Qualcomm Multiple Chipsets Integer Overflow Vulnerability
   Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
   CISA’s required actionApply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
   CVE recordNVD
7. Being used in attacksAdded by CISA on 5 Dec 2023
   Qualcomm Multiple Chipsets
   CVE-2023-33106Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
   Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
   CISA’s required actionApply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
   CVE recordNVD
8. Being used in attacksAdded by CISA on 5 Dec 2023
   Qualcomm Multiple Chipsets
   CVE-2023-33063Qualcomm Multiple Chipsets Use-After-Free Vulnerability
   Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.
   CISA’s required actionApply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
   CVE recordNVD
9. Being used in attacksAdded by CISA on 5 Dec 2023
   Qualcomm Multiple Chipsets
   CVE-2022-22071Qualcomm Multiple Chipsets Use-After-Free Vulnerability
   Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.
   CISA’s required actionApply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
   CVE recordNVD
10. Being used in attacksAdded by CISA on 1 Dec 2021
    Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
    CVE-2020-11261Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
    Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
    CISA’s required actionApply updates per vendor instructions.
    CVE recordNVD
11. Being used in attacksAdded by CISA on 3 Nov 2021
    Qualcomm Multiple Chipsets
    CVE-2021-1906Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
    Multiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address deregistration on failure can lead to new GPU address allocation failure.
    CISA’s required actionApply updates per vendor instructions.
    CVE recordNVD
12. Being used in attacksAdded by CISA on 3 Nov 2021
    Qualcomm Multiple Chipsets
    CVE-2021-1905Qualcomm Multiple Chipsets Use-After-Free Vulnerability
    Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultaneously.
    CISA’s required actionApply updates per vendor instructions.
    CVE recordNVD

From CISA’s Known Exploited Vulnerabilities catalog, updated 21 Oct 2026 (version 2026.10.21). CISA’s required actions are written for US government agencies. Qualcomm on CISA’s site.