Oct 19, 2026 · 16:03 UTC SEARCH
UNRATED KNOWN EXPLOITED
Vulnerability intelligence

CVE-2026-21385

VendorQualcomm
ProductMultiple Chipsets
Known exploitedYes
Added to CISA KEVMarch 3, 2026
KEV due dateMarch 24, 2026
Known ransomware useNot identified by CISA

Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA KEV status

This vulnerability is listed in CISA’s Known Exploited Vulnerabilities Catalog. Known ransomware campaign use: Unknown.

Stay Ahead of the Threat Landscape

Breach intelligence, vulnerability alerts, and original analysis — delivered as it happens.