Skip to content
COOEY

EXPOSURES › CVE-2026-21385

CVE-2026-21385

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2026-03-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-21385 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

Memory corruption in Qualcomm chipsets exploited in the wild

Qualcomm's chipsets had a memory corruption vulnerability that was actively exploited, potentially allowing remote code execution.

Shame score — Active exploitation of a known vulnerability in widely-used DIB components.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Qualcomm · vendorMultiple Chipsets · product
DESCRIPTION

Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.