Qualcomm Multiple Chipsets known exploited vulnerabilities, ranked
CISA lists 10 Qualcomm Multiple Chipsets CVEs as exploited in the wild. 1 were added in the last 12 months and 0 are known to be used in ransomware. The table ranks all of them by EPSS, FIRST's estimate of the chance a CVE is exploited in the next 30 days, so the first rows are the ones to patch first.
Patch these first
- CVE-2021-1905: EPSS 1.5%, added 2021-11-03
- CVE-2026-21385: EPSS 1.3%, added 2026-03-03
- CVE-2025-27038: EPSS 1.0%, added 2025-06-03
- CVE-2023-33106: EPSS 0.9%, added 2023-12-05
- CVE-2023-33107: EPSS 0.9%, added 2023-12-05
All 10 Qualcomm Multiple Chipsets CVEs in CISA KEV, by EPSS
| # | CVE | Flaw | EPSS | Ransomware | Added | Federal due |
|---|---|---|---|---|---|---|
| 1 | CVE-2021-1905 | Multiple Chipsets Use-After-Free | 1.5% | – | 2021-11-03 | 2022-05-03 |
| 2 | CVE-2026-21385 | Multiple Chipsets Memory Corruption | 1.3% | – | 2026-03-03 | 2026-03-24 |
| 3 | CVE-2025-27038 | Multiple Chipsets Use-After-Free | 1.0% | – | 2025-06-03 | 2025-06-24 |
| 4 | CVE-2023-33106 | Multiple Chipsets Use of Out-of-Range Pointer Offset | 0.9% | – | 2023-12-05 | 2023-12-26 |
| 5 | CVE-2023-33107 | Multiple Chipsets Integer Overflow | 0.9% | – | 2023-12-05 | 2023-12-26 |
| 6 | CVE-2025-21479 | Multiple Chipsets Incorrect Authorization | 0.8% | – | 2025-06-03 | 2025-06-24 |
| 7 | CVE-2023-33063 | Multiple Chipsets Use-After-Free | 0.7% | – | 2023-12-05 | 2023-12-26 |
| 8 | CVE-2021-1906 | Multiple Chipsets Detection of Error Condition Without Action | 0.5% | – | 2021-11-03 | 2021-11-17 |
| 9 | CVE-2025-21480 | Multiple Chipsets Incorrect Authorization | 0.5% | – | 2025-06-03 | 2025-06-24 |
| 10 | CVE-2022-22071 | Multiple Chipsets Use-After-Free | 0.5% | – | 2023-12-05 | 2023-12-26 |
EPSS changes daily; a CVE with a low EPSS that is in KEV is still exploited somewhere. Federal due dates bind US federal civilian agencies; everyone else can use them as a priority hint.
Sources: CISA KEV, FIRST EPSS.
More: all Qualcomm KEV CVEs · free KEV badge for Qualcomm · all vendors