---
id: "CVE-2021-1905"
kind: "vulnerability"
aliases: ["CVE-2021-1905"]
title: "Qualcomm Multiple Chipsets: Qualcomm Multiple Chipsets Use-After-Free Vulnerability"
severity: "high"
cvss: 8.4
epss: 0.01543
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Qualcomm Multiple Chipsets", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["android", "exploited", "infrastructure", "mobile-devices", "qualcomm-chipset"]
not_affected_if: ["unknown"]
published_at: "2021-05-07T09:15:08+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:34+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1905", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-1905", "first_seen_at": "2026-10-23T19:13:43+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-1905", "first_seen_at": "2026-10-23T21:57:34+00:00"}]
---

# Qualcomm Multiple Chipsets: Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm chipsets contain a use-after-free bug in memory mapping when multiple processes map memory at the same time. Local code that exploits it can corrupt kernel memory, and CISA lists it as actively exploited.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Qualcomm Multiple Chipsets affected ? fixed ?

## Fix

Apply the Qualcomm security bulletin update for your device per vendor instructions; the sources do not name a patched version.

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1905
- 2026-10-23T19:13:43+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2021-1905
- 2026-10-23T21:57:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2021-1905

## From the sources

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_