CVEvulnerability

CVE-2026-21385

7.8 HIGH Known exploited Published 2026-03-02 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Qualcomm Multiple Chipsets Memory Corruption Vulnerability — Qualcomm Multiple Chipsets

Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation.

Added to KEV: 2026-03-03
Remediation due: 2026-03-24
Ransomware use: Unknown
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes: Please check with specific vendors (OEMs,) for information on patching status. For more information, please see: https://source.android.com/docs/security/bulletin/2026/2026-03-01 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21385

Status: Analyzed
Published: 2026-03-02
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-190

Description

Memory corruption while using alignments for memory allocation.

Affected configurations

• qualcomm sm7675p firmware • qualcomm sm8475p firmware • qualcomm sm8550p firmware • qualcomm sm8635 firmware • qualcomm sm8635p firmware • qualcomm sm8650q firmware • qualcomm sm8750p firmware • qualcomm smart audio 400 platform firmware • qualcomm smart display 200 platform firmware • qualcomm snapdragon 4 gen 1 mobile platform firmware • qualcomm snapdragon 4 gen 2 mobile platform firmware • qualcomm snapdragon 429 mobile platform firmware • qualcomm snapdragon 460 mobile platform firmware • qualcomm snapdragon 480\+ 5g mobile platform firmware • qualcomm snapdragon 480 5g mobile platform firmware • qualcomm snapdragon 6 gen 1 mobile platform firmware • qualcomm snapdragon 6 gen 3 mobile platform firmware • qualcomm snapdragon 6 gen 4 mobile platform firmware • qualcomm snapdragon 625 mobile platform firmware • qualcomm snapdragon 626 mobile platform firmware • qualcomm snapdragon 660 mobile platform firmware • qualcomm snapdragon 662 mobile platform firmware • qualcomm snapdragon 680 4g mobile platform firmware • qualcomm snapdragon 685 4g mobile platform firmware • qualcomm snapdragon 690 5g mobile platform firmware • qualcomm snapdragon 695 5g mobile platform firmware • qualcomm snapdragon 7\+ gen 2 mobile platform firmware • qualcomm snapdragon 7 gen 1 mobile platform firmware • qualcomm snapdragon 778g\+ 5g mobile platform firmware • qualcomm snapdragon 778g 5g mobile platform firmware • qualcomm snapdragon 782g mobile platform firmware • qualcomm snapdragon 7c\+ gen 3 compute firmware • qualcomm snapdragon 7s gen 3 mobile platform firmware • qualcomm snapdragon 8\+ gen 1 mobile platform firmware • qualcomm snapdragon 8\+ gen 2 mobile platform firmware • qualcomm snapdragon 8 elite firmware • qualcomm snapdragon 8 elite gen 5 firmware • qualcomm snapdragon 8 gen 1 mobile platform firmware • qualcomm snapdragon 8 gen 2 mobile platform firmware • qualcomm snapdragon 8 gen 3 mobile platform firmware • qualcomm 5g fixed wireless access platform firmware • qualcomm apq8098 firmware • qualcomm ar8031 firmware • qualcomm ar8035 firmware • qualcomm c-v2x 9150 firmware • qualcomm csra6620 firmware • qualcomm csra6640 firmware • qualcomm fastconnect 6200 firmware • qualcomm fastconnect 6700 firmware • qualcomm fastconnect 6800 firmware • qualcomm fastconnect 6900 firmware • qualcomm fastconnect 7800 firmware • qualcomm flight rb5 5g platform firmware • qualcomm fsm100 platform firmware • qualcomm g1 gen 1 firmware • qualcomm g2 gen 1 firmware • qualcomm iq-615 firmware • qualcomm iq-8275 firmware • qualcomm iq-8300 firmware • qualcomm iq-9075 firmware … and 177 more

Weakness · CWE (1)

CWE-190 Integer Overflow or Wraparound weakness

References