Qualcomm
Number 10 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: Qualcomm, qualcomm
Total vulnerabilities
2,992
Critical
97
High
983
Known Exploited
12
Exploit available
1
Network, no login needed
28.6%
Of 1,397 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 152 | 3 | 102 | 47 | 0 | 0 |
| 2025 | 273 | 5 | 208 | 60 | 0 | 0 |
| 2024 | 257 | 14 | 185 | 58 | 0 | 0 |
| 2023 | 314 | 32 | 206 | 76 | 0 | 0 |
| 2022 | 246 | 25 | 178 | 43 | 0 | 0 |
| 2021 | 261 | 17 | 104 | 33 | 0 | 107 |
| 2020 | 304 | 0 | 0 | 0 | 0 | 304 |
| 2019 | 295 | 0 | 0 | 0 | 0 | 295 |
| 2018 | 596 | 0 | 0 | 0 | 0 | 596 |
| 2017 | 293 | 0 | 0 | 0 | 0 | 293 |
| 2016 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2015 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2014 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2013 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2012 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2011 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2010 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2009 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2008 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2007 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2006 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2005 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2004 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2003 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2002 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2001 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2000 | 0 | 0 | 0 | 0 | 0 | 0 |
| 1999 | 1 | 1 | 0 | 0 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| Snapdragon | 997 | 756 |
| Android for MSM, Firefox OS for MSM, QRD Android | 306 | 0 |
| All Qualcomm products | 174 | 0 |
| Snapdragon Mobile, Snapdragon Wear | 132 | 0 |
| Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear | 123 | 0 |
| Snapdragon Mobile | 114 | 9 |
| Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 73 | 32 |
| Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 50 | 0 |
| Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking | 47 | 10 |
| Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 45 | 4 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 436 | 317 |
| Buffer Over-read | 206 | 152 |
| Improper Input Validation | 51 | 43 |
| Improper Validation of Array Index | 48 | 39 |
| Reachable Assertion | 37 | 32 |
| Use of Out-of-range Pointer Offset | 31 | 23 |
| Race Condition | 29 | 21 |
| Stack-based Buffer Overflow | 27 | 23 |
| Untrusted Pointer Dereference | 25 | 21 |
| Improper Access Control | 20 | 19 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-21385 | Integer Overflow or Wraparound in Graphics | High | 1.3% | |
| CVE-2025-27038 | Use After Free in Graphics | High | 1.0% | |
| CVE-2025-21480 | Incorrect Authorization in Graphics Windows | High | 0.4% | |
| CVE-2025-21479 | Incorrect Authorization in Graphics | High | 0.8% | |
| CVE-2024-43047 | Use After Free in DSP Service | High | 0.7% | |
| CVE-2023-33107 | Integer Overflow or Wraparound in Graphics Linux | High | 1.0% | |
| CVE-2023-33106 | Use of Out-of-range Pointer Offset in Graphics | High | 0.8% | |
| CVE-2023-33063 | Use After Free in DSP Services | High | 0.7% | |
| CVE-2022-22071 | Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music: Memory Corruption | High | 0.4% | |
| CVE-2020-11261 | Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables: Improper Input Validation | High | 1.5% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-57559 | Use After Free in DSP_Services | High | 0.1% | |
| CVE-2026-57555 | Use After Free in DSP Service | High | 0.1% | |
| CVE-2026-57554 | Use After Free in DSP Service | High | 0.1% | |
| CVE-2026-57546 | Buffer Over-read in WLAN HAL | High | 0.2% | |
| CVE-2026-57545 | Untrusted Pointer Dereference in Graphics | High | 0.1% | |
| CVE-2026-57537 | Use After Free in DSP Service | High | 0.1% | |
| CVE-2026-25302 | Improper Verification of Cryptographic Signature in Boot | High | 0.1% | |
| CVE-2026-25291 | Use After Free in Graphics | High | 0.1% | |
| CVE-2026-25274 | Use After Free in Windows WLAN Host | Medium | 0.1% | |
| CVE-2026-25273 | Out-of-bounds Write in Camera Driver | Medium | 0.1% |