[ CVE-2026-21385 · Published 2 Mar 2026 ]
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Exploited · CISA KEV CVSS 7.8
EPSS 1%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2026-03-03
[ Description ]Official description
Memory corruption while using alignments for memory allocation.
CISA: Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 24 Mar 2026): Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Patch on docs.qualcomm.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bulletin.htmlPatchVendor Advisory
- source.android.com/docs/security/bulletin/2026/2026-03-01Vendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource