Vulnerability intelligence
CVE-2026-21385
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Qualcomm Multiple Chipsets
Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation.
CVSS Score
—
Unrated
EPSS — Exploit Probability
1.1%
Riskier than 63% of all CVEs · checked 2026-09-04
Exploitation
Confirmed in the wild
KEV since 2026-03-03
Remediation
Unconfirmed
Federal deadline 2026-03-24
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2026-03-24.
9 articles across 7 outlets · first covered Mar 3, 2026 · latest Mar 9, 2026
Coverage timeline
RSS-
Threat Roundup: CVE-2026-21385 exploited; Coruna iOS exploit kitthehackernews.com · Mar 9, 2026
-
Qualcomm Chipset CVE-2026-21385 Corruption Sparks Ransomware Riskwww.cisa.gov · Mar 5, 2026
-
Qualcomm CVE-2026-21385 Memory corruption amid active exploitscisa.gov · Mar 5, 2026
-
CVE-2026-21385 Qualcomm graphics zero day exploited on Androidwww.malwarebytes.com · Mar 4, 2026
-
CISA Adds CVE-2026-22719 and CVE-2026-21385 to the Exploited Listsecurityaffairs.com · Mar 4, 2026
-
Qualcomm graphics CVE-2026-21385 memory flaw targeted Androidwww.darkreading.com · Mar 3, 2026
-
Android fixes CVE-2026-21385 after zero day in Qualcomm graphicswww.securityweek.com · Mar 3, 2026
-
CVE-2026-21385 exploited in Qualcomm graphics on Android devicessecurityaffairs.com · Mar 3, 2026
-
Google patches CVE-2026-21385 in Qualcomm Android graphicsthehackernews.com · Mar 3, 2026