Live › vulnerability › CVE-2021-1906
Go to dashboardQualcomm chipsets have a flaw where failed GPU address deregistration is not handled, so a later GPU address allocation can fail. The sources say it is exploited in the wild, but do not state what an attacker gets beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Qualcomm Multiple Chipsets | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the firmware and driver updates from the device vendor per the CISA required action; specific patched versions are unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
This page as .md · .json · in your agent: get_signal("CVE-2021-1906")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.