CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Qualcomm Chipset Memory Corruption Vulnerability via Alignment Miscalculation (CVE-2026-21385) Security Advisory
[Affected Scope] Mobile and embedded devices powered by Qualcomm chipsets running affected Android kernel versions
[Impact] Local attackers can trigger an integer overflow (CWE-190) during memory alignment, leading to memory corruption and local privilege escalation (LPE) to kernel level
[Mitigation] Immediately apply the March 2026 security patches released by Qualcomm and Android OEMs
Qualcomm GPU Micronode Privilege Bypass and Memory Corruption Vulnerability (CVE-2025-21479) Technical Advisory
[Affected Scope] Android and embedded devices powered by Qualcomm chipsets utilizing specific GPU micronode firmware
[Impact] Local attackers can execute unauthorized command sequences to bypass security controls, corrupt GPU memory, and achieve local privilege escalation (LPE) to kernel level
[Mitigation] Immediately apply the latest security patches released by Qualcomm and device OEMs, and restrict the installation of untrusted applications
Qualcomm Adreno GPU Micronode Memory Corruption and Privilege Escalation Vulnerability (CVE-2025-21480) Analysis and Mitigation Guide
[Affected Scope] Android and embedded devices utilizing Qualcomm Adreno GPU chipsets and associated drivers
[Impact] Local attackers can execute unauthorized commands within the GPU micronode by sending a specific sequence of commands, leading to memory corruption and local privilege escalation (LPE) to kernel level
[Mitigation] Immediately apply the official security patches released by Qualcomm and device OEMs in or after the June 2025 security bulletin
Qualcomm HLOS Memory Map Management Use-After-Free Vulnerability (CVE-2024-43047) Analysis and Mitigation Guide
[Affected Scope] Android and embedded devices powered by Qualcomm chipsets utilizing specific HLOS (High-Level Operating System) memory drivers
[Impact] Local attackers with low privileges can trigger a Use-After-Free (UAF) condition, leading to kernel memory corruption and full local privilege escalation (LPE) to root
[Mitigation] Apply the official security patches released by OEMs (October 2024 or later) and restrict access to kernel memory drivers using strict SELinux policies
Qualcomm Graphics Linux Driver Integer Overflow Memory Corruption Vulnerability (CVE-2023-33107) Analysis and Mitigation Guide
[Affected Scope] Devices powered by Qualcomm Snapdragon chipsets running Linux or Android kernel-based graphics drivers
[Impact] Local attackers can trigger kernel memory corruption via malicious IOCTL calls, leading to Local Privilege Escalation (LPE) to Root/Kernel level
[Mitigation] Apply the official security patches released by Qualcomm and device OEMs in or after December 2023
Qualcomm KGSL GPU Driver Memory Corruption Vulnerability (CVE-2023-33106) Analysis and Mitigation Guide
[Affected Scope] Android and embedded devices powered by Qualcomm Snapdragon chipsets utilizing specific KGSL GPU driver versions
[Impact] Local attackers can trigger kernel memory corruption via crafted IOCTL calls, leading to Local Privilege Escalation (LPE) and arbitrary code execution with root privileges
[Mitigation] Immediately apply the official security patches released by device OEMs and Qualcomm in or after December 2023
Qualcomm DSP Services Use-After-Free Memory Corruption Vulnerability (CVE-2023-33063) Analysis and Mitigation Guide
[Affected Scope] Android and embedded devices powered by Qualcomm chipsets utilizing DSP (Digital Signal Processor) services
[Impact] Local attackers with low privileges can trigger a Use-After-Free condition via remote calls from HLOS to DSP, leading to kernel-level privilege escalation and arbitrary code execution (actively exploited in the wild)
[Mitigation] Immediately apply the Qualcomm December 2023 security patch or the latest Android security update provided by your device OEM
Qualcomm Snapdragon Kernel Use-After-Free Vulnerability (CVE-2022-22071) Technical Analysis and Hardening Guide
[Affected Scope] Android and embedded devices powered by Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, and Voice & Music chipsets
[Impact] Local attackers can exploit a Use-After-Free condition via IOCTL munmap calls to execute arbitrary code with kernel privileges, leading to full system compromise
[Mitigation] Apply the official security patches released by Qualcomm and device OEMs (May 2022 or later) immediately