CVE-2026-21385

Integer Overflow or Wraparound in Graphics

Basic Information

CVE State: PUBLISHED
Reserved Date: December 17, 2025
Published Date: March 02, 2026
Last Updated: March 04, 2026
Vendor: Qualcomm, Inc.
Product: Snapdragon
Description: Memory corruption while using alignments for memory allocation.
Tags

CVSS Scores

CVSS v3.1

7.8 - HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC Information

Exploitation: active
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (2026-06-01 11:37:52 UTC) Source

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bulletin.html

Known Exploited Vulnerability Information

Source	Added Date
CVE	2026-06-01 11:37:52 UTC

Timeline

CVE ID Reserved

December 17, 2025
CVE Published to Public

March 02, 2026
Added to KEVIntel

June 01, 2026