CVE-2021-1906
Published 2021-05-07 · Updated 2026-06-17 · Source product-security@qualcomm.com
Summary
CVE-2021-1906 is a medium-severity (CVSS 6.2) vulnerability in Qualcomm Multiple Chipsets. CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by November 17, 2021. CISA does not currently list it as used in ransomware campaigns. Qualcomm has 12 vulnerabilities in the KEV catalog, 0 of them linked to ransomware.
All 12 known-exploited Qualcomm vulnerabilities →Description
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA Known-Exploited Vulnerability
Product: Qualcomm — Multiple Chipsets
Name: Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
Date added: 2021-11-03 · Due: 2021-11-17
Required action: Apply updates per vendor instructions.