QUALCOMM INC/DE — Risk Factors Change Report
FY2021 through FY2025 (10-K Filings)
EXECUTIVE SUMMARY
Across the five-year period, Qualcomm's risk profile has shifted from broadly elevated but largely contingent risks toward a set of crystallized, structural threats with confirmed financial impacts. The most significant evolution is the transition of several previously hypothetical risks — Apple modem displacement, Huawei revenue loss, and macroeconomic demand weakness — into confirmed, quantified headwinds. The overall risk rating remains "High" throughout, but the composition and severity of leading risks has materially changed.
CHRONOLOGICAL CHANGE ANALYSIS
FY2021 (Period Ending September 26, 2021)
Baseline Risk Profile — Elevated but Largely Contingent
The FY2021 filing establishes the foundational risk architecture. Most significant risks are framed as potential or escalating rather than realized:
- COVID-19 is rated High — demand recovery noted in early 2021 but ongoing uncertainty around variants. This risk is prominent in FY2021 and largely absent by FY2023.
- Semiconductor supply shortage is introduced as a new/escalating risk — global chip demand exceeding capacity is explicitly called out as a current material constraint on revenue growth. This is a new risk not present in prior periods.
- Apple modem threat is framed as a future risk: Apple acquired Intel's modem assets in December 2019 and is developing its own modem. The risk is acknowledged but treated as a medium-term contingency.
- China geopolitical risk is described as escalating, with "Made in China 2025" targeting 70% semiconductor self-sufficiency. No specific revenue loss has yet materialized.
- Customer vertical integration is flagged across Apple, Samsung, and Chinese OEMs, with supply constraints noted as accelerating the motivation.
- Human capital risk is newly articulated — remote work expanding the competitive talent pool is described as an emerging concern.
- Cybersecurity is rated Medium-High; COVID-19 is noted as increasing the attack surface.
Key FY2021 Characterization: Risks are real but largely forward-looking. The business model is under pressure but intact.
FY2022 (Period Ending September 25, 2022)
Cyclical Downturn Materializes; Structural Risks Intensify
FY2022 represents the first filing where near-term financial headwinds are explicitly acknowledged as current conditions rather than hypothetical scenarios:
- Macroeconomic weakness is elevated to High (Near-Term): Qualcomm explicitly acknowledges weakening consumer demand for smartphones and elevated inventory levels at customers suppressing near-term chipset purchases. Management states this is expected to persist — a notable shift from FY2021's recovery narrative.
- Semiconductor supply shortage partially abates: The FY2021 supply constraint risk is partially downgraded — capacity constraints are described as "largely abated." However, supplier price increases persist, creating a new margin compression dynamic (demand softening simultaneously with cost increases — an unfavorable combination not present in FY2021).
- China geopolitical risk escalates further: COVID lockdowns in China during 2022 added a new near-term demand disruption layer on top of the structural trade tension risk.
- Apple vertical integration is described as actively progressing post-Intel acquisition — language is more urgent than FY2021.
- Diversification execution risk is newly articulated as a standalone risk category: Qualcomm's pivot to automotive and IoT is acknowledged as strategically necessary but carrying high execution risk, with competitors (NXP, Renesas) having significantly more established positions.
- Cybersecurity escalates: Attacks described as "increasingly sophisticated"; China cybersecurity certification requirements emerge as a new compliance burden.
- Tax risk increases: OECD BEPS implementation and a scheduled FDII tax rate increase (to take effect 2027) are newly flagged.
- Talent/human capital risk increases: Inflation-driven compensation pressure and expanded remote work competition are added as new dimensions.
Key FY2022 Change: The filing marks the transition from "risks that could materialize" to "risks that are materializing." The macroeconomic and inventory correction headwinds are the most significant new near-term additions.
FY2023 (Period Ending September 24, 2023)
Multiple Risks Crystallize Simultaneously; Huawei Becomes a Specific Threat
FY2023 is the most significant single-year escalation in the risk profile across the five-year period:
- Huawei revenue explicitly written off: The filing states Qualcomm does "not expect material product revenues from Huawei going forward" — a concrete, named revenue loss. Huawei's launch of 5G-capable devices using its own HiSilicon Kirin chips is cited as a new competitive threat to Qualcomm's other Chinese OEM customers. This is a qualitative step-change from FY2022, where Huawei was a general geopolitical risk rather than a named revenue loss.
- Manufacturing underutilization is newly disclosed as a current condition: Qualcomm explicitly states it "is currently experiencing, and expects to continue to experience in the near term, such underutilization of capacity" at its owned manufacturing facilities — a concrete operational headwind not present in prior filings.
- Macroeconomic weakness and elevated customer inventories are again confirmed as present-day conditions, not hypothetical risks — consistent with FY2022 but now in a second consecutive year.
- Apple modem transition is described as more imminent: Language shifts from "expected to develop" to "expected to displace Qualcomm in future devices."
- AI-enabled cyberattacks are explicitly introduced for the first time as a new threat vector — AI being used by attackers to develop malicious code. This is a qualitative escalation in cybersecurity risk.
- Return-to-office friction is a new human capital risk: Qualcomm's FY2023 policy change requiring majority in-office attendance is flagged as a new talent retention risk.
- ESG compliance emerges as a new risk category: Customer-imposed sustainability targets (net-zero commitments) are becoming a business risk for the first time.
- AI regulation is listed as a new regulatory area.
- COVID-19 is effectively removed as an active risk — referenced only as historical context.
Key FY2023 Change: The Huawei revenue loss is the most significant new development. Combined with ongoing macroeconomic weakness and manufacturing underutilization, FY2023 represents the period where the risk profile shifts from "elevated contingencies" to "confirmed structural headwinds."
FY2024 (Period Ending September 29, 2024)
Huawei License Revocation Quantified; Risk Velocity Demonstrated
FY2024 is defined by the crystallization of the Huawei geopolitical risk into a specific, quantified revenue loss:
- Huawei export license revoked (May 7, 2024): The U.S. Department of Commerce revoked Qualcomm's license to sell 4G and other integrated circuit products to Huawei, effective immediately. Qualcomm recorded approximately $560 million in product revenues from Huawei in FY2024 prior to revocation — revenues confirmed as non-recurring. This is the most significant single risk crystallization event across the five-year period. The filing explicitly notes this demonstrates that risks can "crystallize rapidly and without warning."
- Risk velocity is introduced as a new assessment dimension: The speed of the Huawei revocation is used to illustrate that further restrictions on other Chinese OEMs are possible with limited advance notice.
- Apple modem transition language continues to harden: Qualcomm explicitly expects Apple to use its own modem in "some or all future devices" — more definitive than prior years' language.
- Taiwan-China conflict is elevated to an explicit "catastrophic tail risk" description — language is more severe than in prior filings, where it was noted as a concern but not characterized in catastrophic terms.
- FDII tax rate increase is now quantified: Rate increases from 13% to 16% effective fiscal 2027, with OECD Pillar Two implementation underway — more specific than prior years' general references.
- Macroeconomic/cyclicality risk is downgraded from High (Near-Term) to Moderate: The acute inventory correction of FY2022-FY2023 appears to have partially normalized, though the risk remains present.
- Manufacturing underutilization is no longer called out as a current condition — suggesting partial recovery from the FY2023 trough.
Key FY2024 Change: The $560M Huawei revenue loss is the defining event. It converts the China geopolitical risk from a contingency into a confirmed, quantified impairment and establishes a precedent for how quickly further restrictions could materialize.
FY2025 (Period Ending September 28, 2025)
Apple Modem Transition Elevated to Near-Certainty; New Risks Emerge
FY2025 represents a further hardening of the Apple and China risks, with new risk categories introduced:
- Apple modem transition upgraded to near-certainty: The filing explicitly states Apple will "increasingly use its own modem products" and that this will have a "significant negative impact on QCT revenues, results of operations and cash flows." This is the strongest language used across all five filings — the risk has moved from contingency to confirmed near-term headwind. The double-negative effect (direct revenue loss plus indirect share shift away from higher-margin integrated product customers) is explicitly articulated for the first time.
- Xiaomi is newly named alongside Apple and Samsung as a customer developing its own integrated circuits — expanding the vertical integration risk beyond the previously named set.
- Tariff/trade policy uncertainty is elevated as a new near-term risk: "Recent changes in global trade policy" causing "significant volatility" and "increased economic uncertainty" — language consistent with a broader tariff environment not specifically called out in prior filings.
- AI as a dual-edged risk is newly introduced: AI is now flagged both as a cybersecurity attack vector (AI-powered phishing and malware) and as a source of intellectual property uncertainty — unclear ownership of AI-generated IP and copyright infringement exposure from AI training data. This is a genuinely new risk category not present in any prior filing.
- Data center is added to the diversification strategy alongside automotive and IoT — representing a new market entry not previously disclosed.
- Cybersecurity is upgraded from Moderate-High to High — the first time it reaches this level across the five-year period, driven by AI-enabled attack sophistication and new attack surfaces from internal AI use.
- Huawei revenue loss is confirmed as permanent: The filing reiterates that Qualcomm expects "no further product revenues from Huawei" — consistent with FY2024 but now treated as a baseline condition rather than a recent shock.
- COVID-19 remains absent as a risk factor — fully removed.
- Macroeconomic/cyclicality remains at Moderate — no further deterioration from FY2024.
Key FY2025 Change: The Apple modem transition is now the leading near-term risk, displacing the Huawei license revocation (which is now a confirmed baseline loss rather than a new shock). The addition of Xiaomi to the vertical integration risk set and the introduction of AI-related IP uncertainty are the most significant new risk disclosures.
CROSS-PERIOD RISK TRAJECTORY SUMMARY
| Risk Area | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 | Overall Trajectory |
|---|---|---|---|---|---|---|
| COVID-19 | High | Declining | Historical only | Absent | Absent | ✅ Removed |
| Semiconductor supply shortage | New/High | Partially abating | Largely abated | Stable | Stable | ✅ Largely Resolved |
| Macroeconomic/inventory weakness | Not present | New/High | High (current) | Moderate | Moderate | ↕ Cyclical — peaked FY2022-23 |
| Manufacturing underutilization | Not present | Not present | New/Current | Partially resolved | Not called out | ↕ Cyclical — peaked FY2023 |
| Apple modem transition | Contingent | Escalating | More imminent | Near-certain | Confirmed/Significant | 🔴 Continuously Escalating |
| China/Huawei geopolitical risk | Escalating | Escalating | Revenue loss named | $560M loss quantified | Permanent baseline | 🔴 Continuously Escalating → Crystallized |
| Customer vertical integration | High | Critical | Critical | Critical | Critical (+ Xiaomi) | 🔴 Continuously Escalating |
| Licensing/IP challenges | Persistent | Persistent | Persistent | Persistent | Persistent | → Stable/Elevated |
| Supply chain/Taiwan risk | High | High | High (catastrophic language) | High | High | → Stable/Elevated |
| Cybersecurity | Medium-High | Moderate-High | Moderate-High | Moderate-High | High | ↑ Gradually Escalating |
| AI-related risks | Not present | Not present | Partial (cyber only) | Cyber vector | New IP risk category | 🆕 Emerging |
| Tariff/trade policy volatility | Not present | Not present | Not present | Not present | New/High | 🆕 New in FY2025 |
| Tax risk (FDII/OECD) | Moderate | Moderate | Moderate | Quantified (13%→16%) | Moderate | ↑ Gradually Escalating |
| Diversification execution risk | Medium | New/Moderate-High | Moderate-High | Moderate | Medium-High (+data center) | → Stable; scope expanding |
| Human capital | Emerging | Increasing | New friction (RTO) | Moderate | Moderate | ↑ Peaked FY2023; stable |
| ESG/climate | Not present | Not present | New/Moderate | Not prominent | Referenced | 🆕 Emerged FY2023 |
KEY STRATEGIC OBSERVATIONS
1. Risk Crystallization Pattern
The most notable trend across the five-year period is the systematic conversion of contingent risks into confirmed losses. The Huawei export license revocation ($560M in FY2024) and the Apple modem transition (confirmed "significant negative impact" in FY2025) represent the two largest crystallizations. The filing language has progressively hardened on both — from "could" to "expected to" to "will."
2. China Risk Has Become the Central Organizing Risk
What began in FY2021 as one of several elevated risks has become the dominant risk cluster by FY2024-2025. China exposure now permeates geopolitical risk, customer concentration risk, vertical integration risk, supply chain risk (Taiwan), and licensing risk simultaneously. The Huawei revocation demonstrates the speed at which government action can eliminate revenue.
3. The Apple Modem Transition Is Now the Leading Near-Term Structural Headwind
In FY2021, this was a medium-term contingency. By FY2025, it is presented as a near-certainty with an explicitly acknowledged "significant negative impact." This is the single most significant risk escalation across the five-year period in terms of directional clarity.
4. Resolved Risks Are Primarily Cyclical
The risks that have been removed or downgraded — COVID-19, semiconductor supply shortage, manufacturing underutilization, acute macroeconomic weakness — are all cyclical in nature. The structural risks (Apple, China, licensing model, Taiwan supply chain) have not resolved and have generally intensified.
5. New Risk Categories Are Expanding
Each successive filing introduces new risk areas: diversification execution risk (FY2022), ESG compliance and AI cyber threats (FY2023), AI-related IP uncertainty and tariff volatility (FY2025), and data center expansion risk (FY2025). The risk surface is broadening as Qualcomm's business scope expands.
6. Licensing Business Remains the Financial Linchpin Under Persistent Attack
The QTL licensing segment's risk profile has been consistently described as "persistent/elevated" across all five years without meaningful resolution. Its disproportionate margin contribution means any structural impairment would have outsized impact on R&D funding capacity — a self-reinforcing vulnerability that management has consistently acknowledged but not resolved.