How severe is CVE-2026-21385?

CVE-2026-21385 has a CVSS 3.1 base score of 7.8 (HIGH). EPSS estimates a 1.3% probability of exploitation in the next 30 days. It is listed in the CISA Known Exploited Vulnerabilities catalog.

CVE-2026-21385: Integer Overflow or Wraparound in

CISA Known Exploited Vulnerabilities

Qualcomm Multiple Chipsets Memory Corruption Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.

Added to KEV

2026-03-03

Remediation due

2026-03-24

Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA notes
Please check with specific vendors (OEMs,) for information on patching status. For more information, please see: https://source.android.com/docs/security/bulletin/2026/2026-03-01 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21385

Description

Memory corruption while using alignments for memory allocation.

Severity

CVSS 3.1 · CNA7.8 HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC · CISA-ADP

Exploitationactive

Automatableno

Technical impacttotal

Affected Products

Vendor	Product	Affected versions
Qualcomm, Inc.	Snapdragon	5G Fixed Wireless Access Platform APQ8098 AR8031 AR8035 C-V2X 9150 CSRA6620 CSRA6640 FastConnect 6200 FastConnect 6700 FastConnect 6800 FastConnect 6900 FastConnect 7800 Flight RB5 5G Platform FSM100 Platform G1 Gen 1 G2 Gen 1 IQ6 Series Platform IQ8 Series Platform IQ9 Series Platform LeMans_AU_LGIT LeMansAU MDM9250 MDM9628 Milos Monaco_IOT Netrani Orne Palawan25 Pandeiro QAM8255P QAM8295P QAMSRV1H QAMSRV1M QCA2066 QCA6174A QCA6391 QCA6564A QCA6564AU QCA6574 QCA6574A QCA6574AU QCA6584AU QCA6595 QCA6595AU QCA6678AQ QCA6688AQ QCA6696 QCA6698AQ QCA6698AU QCA6797AQ QCA8081 QCA8337 QCA8695AU QCA9367 QCA9377 QCM2290 QCM4325 QCM4490 QCM5430 QCM6125 QCM6490 QCN6024 QCN9011 QCN9012 QCN9024 QCS2290 QCS4290 QCS4490 QCS8550 QLN1083BD QLN1086BD QMP1000 QPA1083BD QPA1086BD QRB5165M QRB5165N Qualcomm 215 Mobile Platform Qualcomm Video Collaboration VC1 Platform Qualcomm Video Collaboration VC3 Platform Qualcomm Video Collaboration VC5 Platform QXM1083 QXM1086 QXM1093 QXM1094 QXM1095 QXM1096 Robotics RB2 Platform Robotics RB5 Platform SA4150P SA4155P SA6145P SA6150P SA6155 SA6155P SA7255P SA7775P SA8145P SA8150P SA8155 SA8155P SA8195P SA8255P SA8295P SA8620P SA8770P SA9000P SAR1165P SAR1250P SAR2130P SAR2230P SC8380XP SD 8 Gen1 5G SD626 SD662 SD865 5G SDA660 SDM429W SDX61 SM6225P SM6650P SM7325P SM7435 SM7550 SM7550P SM7635P SM7675 SM7675P SM8475P SM8550P SM8635 SM8635P SM8650Q SM8750P Smart Audio 400 Platform Smart Display 200 Platform Snapdragon 4 Gen 1 Mobile Platform Snapdragon 4 Gen 2 Mobile Platform Snapdragon 429 Mobile Platform Snapdragon 460 Mobile Platform Snapdragon 480 5G Mobile Platform Snapdragon 480+ 5G Mobile Platform Snapdragon 6 Gen 1 Mobile Platform Snapdragon 6 Gen 3 Mobile Platform Snapdragon 6 Gen 4 Mobile Platform Snapdragon 625 Mobile Platform Snapdragon 626 Mobile Platform Snapdragon 660 Mobile Platform Snapdragon 662 Mobile Platform Snapdragon 680 4G Mobile Platform Snapdragon 685 4G Mobile Platform Snapdragon 690 5G Mobile Platform Snapdragon 695 5G Mobile Platform Snapdragon 7 Gen 1 Mobile Platform Snapdragon 7+ Gen 2 Mobile Platform Snapdragon 778G 5G Mobile Platform Snapdragon 778G+ 5G Mobile Platform Snapdragon 782G Mobile Platform Snapdragon 7c+ Gen 3 Compute Snapdragon 7s Gen 3 Mobile Platform Snapdragon 8 Elite Snapdragon 8 Elite Gen 5 Snapdragon 8 Gen 1 Mobile Platform Snapdragon 8 Gen 2 Mobile Platform Snapdragon 8 Gen 3 Mobile Platform Snapdragon 8+ Gen 1 Mobile Platform Snapdragon 8+ Gen 2 Mobile Platform Snapdragon 820 Automotive Platform Snapdragon 820Am Snapdragon 865 5G Mobile Platform Snapdragon 865+ 5G Mobile Platform Snapdragon 870 5G Mobile Platform Snapdragon 888 5G Mobile Platform Snapdragon 888+ 5G Mobile Platform Snapdragon AR1 Gen 1 Platform Snapdragon AR1+ Gen 1 Platform Snapdragon Auto 5G Modem-RF Snapdragon W5+ Gen 1 Wearable Platform Snapdragon X12 LTE Modem Snapdragon X5 LTE Modem Snapdragon X53 5G Modem-RF System Snapdragon X55 5G Modem-RF System Snapdragon X65 5G Modem-RF System Snapdragon XR2 5G Platform Snapdragon XR2+ Gen 1 Platform SRV1H SRV1M SW5100 SW5100P SW6100 SW6100P SXR2230P SXR2250P SXR2330P SXR2350P Themisto Vision Intelligence 100 Platform Vision Intelligence 200 Platform Vision Intelligence 400 Platform WCD9326 WCD9330 WCD9335 WCD9341 WCD9360 WCD9370 WCD9371 WCD9375 WCD9378 WCD9380 WCD9385 WCD9390 WCD9395 WCN3615 WCN3620 WCN3660B WCN3680B WCN3910 WCN3950 WCN3980 WCN3988 WCN3990 WCN6450 WCN6650 WCN6755 WCN7860 WCN7861 WCN7880 WCN7881 WSA8810 WSA8815 WSA8830 WSA8832 WSA8835 WSA8840 WSA8845 WSA8845H

References

1 Links

Other references

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bulletin.html

Record Details

Published

2026-03-02

Last updated

2026-03-04

Assigner (CNA)

qualcomm

Credited to

More from Qualcomm, Inc.

CVE-2020-112617.8

Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

CVE-2021-19058.4

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CVE-2025-270387.5

Use After Free in Graphics

CVE-2023-331068.4

Use of Out-of-range Pointer Offset in Graphics

Related Tool Categories

Tool categories that test for or protect against this vulnerability class.

CWE-190 · Integer Overflow or Wraparound

Fuzzing Binary Exploitation

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.