high7.8Known exploited
CVE-2026-21385
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Exploited in the wild
This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2026-03-03. Federal due date: 2026-03-24.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Sm7675p Firmware | All versions |
| Qualcomm | Sm8475p Firmware | All versions |
| Qualcomm | Sm8550p Firmware | All versions |
| Qualcomm | Sm8635 Firmware | All versions |
| Qualcomm | Sm8635p Firmware | All versions |
| Qualcomm | Sm8650q Firmware | All versions |
| Qualcomm | Sm8750p Firmware | All versions |
| Qualcomm | Smart Audio 400 Platform Firmware | All versions |
| Qualcomm | Smart Display 200 Platform Firmware | All versions |
| Qualcomm | Snapdragon 4 Gen 1 Mobile Platform Firmware | All versions |
| Qualcomm | Snapdragon 4 Gen 2 Mobile Platform Firmware | All versions |
| Qualcomm | Snapdragon 429 Mobile Platform Firmware | All versions |