[ CVE-2026-21385 · Published 2 Mar 2026 ]

Qualcomm Multiple Chipsets Memory Corruption Vulnerability

Exploited · CISA KEV CVSS 7.8 EPSS 1%Fix available

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2026-03-03

[ Description ]Official description

Memory corruption while using alignments for memory allocation.

CISA: Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 24 Mar 2026): Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.