CVE-2026-21385

high-risk
Published 2026-03-02

Memory corruption while using alignments for memory allocation.

Do I need to act?

-
0.24% chance of exploitation
EPSS score — low exploit probability
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10 High
LOCAL / LOW complexity

Affected Products (20)

Snapdragon 6 Gen 3 Mobile Platform Firmware
Snapdragon 6 Gen 4 Mobile Platform Firmware

Affected Vendors

Qualcomm

References (3)

Patch https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bu...
Vendor Advisory https://source.android.com/docs/security/bulletin/2026/2026-03-01
US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-...
65
/ 100
high-risk
Severity 24/34 · High
Exploitability 8/34 · Low
Exposure 33/34 · Critical