Qualcomm: CISA KEV History
Every Qualcomm vulnerability in the CISA Known Exploited Vulnerabilities catalog: confirmed in-the-wild exploitation, addition timeline, and ransomware linkage. Rebuilt automatically on every site deploy.
Snapshot: 2026-09-08 · Source: CISA KEV Catalog · Full KEV dashboard
Qualcomm KEV additions per month, last 24 months
Most-listed products: Multiple Chipsets, Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables.
Latest 12 of 12 Qualcomm KEV entries
| CVE | Vulnerability | Added | Ransomware |
|---|---|---|---|
| CVE-2026-21385 | Qualcomm Multiple Chipsets Memory Corruption Vulnerability | 2026-03-03 | No |
| CVE-2025-21479 | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | 2025-06-03 | No |
| CVE-2025-21480 | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | 2025-06-03 | No |
| CVE-2025-27038 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2025-06-03 | No |
| CVE-2024-43047 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2024-10-08 | No |
| CVE-2023-33107 | Qualcomm Multiple Chipsets Integer Overflow Vulnerability | 2023-12-05 | No |
| CVE-2023-33106 | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | 2023-12-05 | No |
| CVE-2023-33063 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2023-12-05 | No |
| CVE-2022-22071 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2023-12-05 | No |
| CVE-2020-11261 | Qualcomm Multiple Chipsets Improper Input Validation Vulnerability | 2021-12-01 | No |
| CVE-2021-1906 | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability | 2021-11-03 | No |
| CVE-2021-1905 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2021-11-03 | No |
CVE links go to our explainer when one exists, otherwise to the NVD record.
Data: official CISA KEV catalog, fetched at build time. Figures may be reused with attribution to East Bay Cyber and CISA. See also the KEV Velocity Dashboard and all tracked vendors.