{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T19:58:23.236Z",
  "tag": {
    "id": "qualcomm",
    "label": "Qualcomm",
    "isStack": false,
    "url": "https://pwn.watch/t/qualcomm",
    "feed": "https://pwn.watch/t/qualcomm/feed.xml"
  },
  "counts": {
    "incidents": 3,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 3
  },
  "incidents": [
    {
      "slug": "qualcomm-multiple-chipsets-cve-2025-21479",
      "title": "Qualcomm Multiple Chipsets: 3 exploited vulnerabilities (CVE-2025-21479, CVE-2025-21480, CVE-2025-27038)",
      "url": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2025-21479",
      "json": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2025-21479.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Qualcomm Multiple Chipsets",
      "tags": [
        "qualcomm",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-21479",
        "CVE-2025-21480",
        "CVE-2025-27038"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-06-03",
      "closedAt": "2025-06-03",
      "updatedAt": "2025-06-03",
      "summary": "CVE-2025-21479: Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. CVE-2025-21480: Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. CVE-2025-27038: Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome. Added to CISA KEV on 2025-06-03.",
      "xPost": null
    },
    {
      "slug": "qualcomm-multiple-chipsets-cve-2024-43047",
      "title": "Qualcomm Multiple Chipsets Use-After-Free",
      "url": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2024-43047",
      "json": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2024-43047.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Qualcomm Multiple Chipsets",
      "tags": [
        "qualcomm",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-43047"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-10-07",
      "closedAt": "2024-10-08",
      "updatedAt": "2024-10-08",
      "summary": "Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory. Added to the CISA KEV catalog on 2024-10-08.",
      "xPost": null
    },
    {
      "slug": "qualcomm-multiple-chipsets-cve-2022-22071-and-3-more",
      "title": "Qualcomm Multiple Chipsets: 4 exploited vulnerabilities",
      "url": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2022-22071-and-3-more",
      "json": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2022-22071-and-3-more.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Qualcomm Multiple Chipsets",
      "tags": [
        "qualcomm",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2022-22071",
        "CVE-2023-33063",
        "CVE-2023-33106",
        "CVE-2023-33107"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-12-05",
      "closedAt": "2023-12-05",
      "updatedAt": "2023-12-05",
      "summary": "Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress. Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP. Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. Added to CISA KEV on 2023-12-05.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "qualcomm-multiple-chipsets-cve-2025-21479",
      "incidentTitle": "Qualcomm Multiple Chipsets: 3 exploited vulnerabilities (CVE-2025-21479, CVE-2025-21480, CVE-2025-27038)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-06-03",
      "title": "CISA added CVE-2025-21479 to the KEV catalog (due 2025-06-24).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2025-21479"
    },
    {
      "incident": "qualcomm-multiple-chipsets-cve-2025-21479",
      "incidentTitle": "Qualcomm Multiple Chipsets: 3 exploited vulnerabilities (CVE-2025-21479, CVE-2025-21480, CVE-2025-27038)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-06-03",
      "title": "CISA added CVE-2025-21480 to the KEV catalog (due 2025-06-24).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2025-21479"
    },
    {
      "incident": "qualcomm-multiple-chipsets-cve-2025-21479",
      "incidentTitle": "Qualcomm Multiple Chipsets: 3 exploited vulnerabilities (CVE-2025-21479, CVE-2025-21480, CVE-2025-27038)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-06-03",
      "title": "CISA added CVE-2025-27038 to the KEV catalog (due 2025-06-24).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2025-21479"
    },
    {
      "incident": "qualcomm-multiple-chipsets-cve-2024-43047",
      "incidentTitle": "Qualcomm Multiple Chipsets Use-After-Free",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-10-08",
      "title": "CISA added CVE-2024-43047 to the KEV catalog (federal deadline 2024-10-29)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2024-43047"
    },
    {
      "incident": "qualcomm-multiple-chipsets-cve-2024-43047",
      "incidentTitle": "Qualcomm Multiple Chipsets Use-After-Free",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-10-07",
      "title": "CVE-2024-43047 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-43047",
      "url": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2024-43047"
    },
    {
      "incident": "qualcomm-multiple-chipsets-cve-2022-22071-and-3-more",
      "incidentTitle": "Qualcomm Multiple Chipsets: 4 exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-12-05",
      "title": "CISA added CVE-2022-22071 to the KEV catalog (due 2023-12-26).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2022-22071-and-3-more"
    },
    {
      "incident": "qualcomm-multiple-chipsets-cve-2022-22071-and-3-more",
      "incidentTitle": "Qualcomm Multiple Chipsets: 4 exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-12-05",
      "title": "CISA added CVE-2023-33063 to the KEV catalog (due 2023-12-26).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2022-22071-and-3-more"
    },
    {
      "incident": "qualcomm-multiple-chipsets-cve-2022-22071-and-3-more",
      "incidentTitle": "Qualcomm Multiple Chipsets: 4 exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-12-05",
      "title": "CISA added CVE-2023-33106 to the KEV catalog (due 2023-12-26).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2022-22071-and-3-more"
    },
    {
      "incident": "qualcomm-multiple-chipsets-cve-2022-22071-and-3-more",
      "incidentTitle": "Qualcomm Multiple Chipsets: 4 exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-12-05",
      "title": "CISA added CVE-2023-33107 to the KEV catalog (due 2023-12-26).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/qualcomm-multiple-chipsets-cve-2022-22071-and-3-more"
    }
  ]
}