---
id: "CVE-2021-1906"
kind: "vulnerability"
aliases: ["CVE-2021-1906"]
title: "Qualcomm Multiple Chipsets: Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability"
severity: "medium"
cvss: 6.2
epss: 0.0052
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Qualcomm Multiple Chipsets", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["android", "exploited", "mobile-devices", "qualcomm", "vendor"]
not_affected_if: ["unknown"]
published_at: "2021-05-07T09:15:08+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:34+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1906", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-1906", "first_seen_at": "2026-10-23T19:13:43+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-1906", "first_seen_at": "2026-10-23T21:57:34+00:00"}]
---

# Qualcomm Multiple Chipsets: Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability

Qualcomm chipsets have a flaw where failed GPU address deregistration is not handled, so a later GPU address allocation can fail. The sources say it is exploited in the wild, but do not state what an attacker gets beyond that.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Qualcomm Multiple Chipsets affected ? fixed ?

## Fix

Apply the firmware and driver updates from the device vendor per the CISA required action; specific patched versions are unknown from the sources.

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1906
- 2026-10-23T19:13:43+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2021-1906
- 2026-10-23T21:57:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2021-1906

## From the sources

Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_