# CVE-2026-21385

Memory corruption while using alignments for memory allocation.

- Page: https://www.vulneraibility.com/cve/CVE-2026-21385
- CVSS: 7.8
- Known exploited: yes, in CISA KEV since 2026-03-03; CISA due date 2026-03-24
- EPSS: 1.32%
- Unvetted proof-of-concept code on GitHub: 1 GitHub proof of concept (first 2026-03-12)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2026-03-02)
- Weakness: CWE-190
- Published: 2026-03-02

## Affected versions

- Qualcomm, Inc. Snapdragon: affected 5G Fixed Wireless Access Platform; APQ8098; AR8031; AR8035; C-V2X 9150; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; FSM100 Platform; G1 Gen 1; G2 Gen 1; IQ6 Series Platform; IQ8 Series Platform; IQ9 Series Platform; LeMans_AU_LGIT; LeMansAU; MDM9250; MDM9628; Milos; Monaco_IOT; Netrani; Orne; Palawan25; Pandeiro; QAM8255P; QAM8295P; QAMSRV1H; QAMSRV1M; QCA2066; QCA6174A; QCA6391; QCA6564A; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6584AU; QCA6595; QCA6595AU; QCA6678AQ; QCA6688AQ; QCA6696; QCA6698AQ; QCA6698AU; QCA6797AQ; QCA8081; QCA8337; QCA8695AU; QCA9367; QCA9377; QCM2290; QCM4325; QCM4490; QCM5430; QCM6125; QCM6490; QCN6024; QCN9011; QCN9012; QCN9024; QCS2290; QCS4290; QCS4490; QCS8550; QLN1083BD; QLN1086BD; QMP1000; QPA1083BD; QPA1086BD; QRB5165M; QRB5165N; Qualcomm 215 Mobile Platform; Qualcomm Video Collaboration VC1 Platform; Qualcomm Video Collaboration VC3 Platform; Qualcomm Video Collaboration VC5 Platform; QXM1083; QXM1086; QXM1093; QXM1094; QXM1095; QXM1096; Robotics RB2 Platform; Robotics RB5 Platform; SA4150P; SA4155P; SA6145P; SA6150P; SA6155; SA6155P; SA7255P; SA7775P; SA8145P; SA8150P; SA8155; SA8155P; SA8195P; SA8255P; SA8295P; SA8620P; SA8770P; SA9000P; SAR1165P; SAR1250P; SAR2130P; SAR2230P; SC8380XP; SD 8 Gen1 5G; SD626; SD662; SD865 5G; SDA660; SDM429W; SDX61; SM6225P; SM6650P; SM7325P; SM7435; SM7550; SM7550P; SM7635P; SM7675; SM7675P; SM8475P; SM8550P; SM8635; SM8635P; SM8650Q; SM8750P; Smart Audio 400 Platform; Smart Display 200 Platform; Snapdragon 4 Gen 1 Mobile Platform; Snapdragon 4 Gen 2 Mobile Platform; Snapdragon 429 Mobile Platform; Snapdragon 460 Mobile Platform; Snapdragon 480 5G Mobile Platform; Snapdragon 480+ 5G Mobile Platform; Snapdragon 6 Gen 1 Mobile Platform; Snapdragon 6 Gen 3 Mobile Platform; Snapdragon 6 Gen 4 Mobile Platform; Snapdragon 625 Mobile Platform; Snapdragon 626 Mobile Platform; Snapdragon 660 Mobile Platform; Snapdragon 662 Mobile Platform; Snapdragon 680 4G Mobile Platform; Snapdragon 685 4G Mobile Platform; Snapdragon 690 5G Mobile Platform; Snapdragon 695 5G Mobile Platform; Snapdragon 7 Gen 1 Mobile Platform; Snapdragon 7+ Gen 2 Mobile Platform; Snapdragon 778G 5G Mobile Platform; Snapdragon 778G+ 5G Mobile Platform; Snapdragon 782G Mobile Platform; Snapdragon 7c+ Gen 3 Compute; Snapdragon 7s Gen 3 Mobile Platform; Snapdragon 8 Elite; Snapdragon 8 Elite Gen 5; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8 Gen 3 Mobile Platform; Snapdragon 8+ Gen 1 Mobile Platform; Snapdragon 8+ Gen 2 Mobile Platform; Snapdragon 820 Automotive Platform; Snapdragon 820Am; Snapdragon 865 5G Mobile Platform; Snapdragon 865+ 5G Mobile Platform; Snapdragon 870 5G Mobile Platform; Snapdragon 888 5G Mobile Platform; Snapdragon 888+ 5G Mobile Platform; Snapdragon AR1 Gen 1 Platform; Snapdragon AR1+ Gen 1 Platform; Snapdragon Auto 5G Modem-RF; Snapdragon W5+ Gen 1 Wearable Platform; Snapdragon X12 LTE Modem; Snapdragon X5 LTE Modem; Snapdragon X53 5G Modem-RF System; Snapdragon X55 5G Modem-RF System; Snapdragon X65 5G Modem-RF System; Snapdragon XR2 5G Platform; Snapdragon XR2+ Gen 1 Platform; SRV1H; SRV1M; SW5100; SW5100P; SW6100; SW6100P; SXR2230P; SXR2250P; SXR2330P; SXR2350P; Themisto; Vision Intelligence 100 Platform; Vision Intelligence 200 Platform; Vision Intelligence 400 Platform; WCD9326; WCD9330; WCD9335; WCD9341; WCD9360; WCD9370; WCD9371; WCD9375; WCD9378; WCD9380; WCD9385; WCD9390; WCD9395; WCN3615; WCN3620; WCN3660B; WCN3680B; WCN3910; WCN3950; WCN3980; WCN3988; WCN3990; WCN6450; WCN6650; WCN6755; WCN7860; WCN7861; WCN7880; WCN7881; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845; WSA8845H

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bulletin.html
- [advisory] https://source.android.com/docs/security/bulletin/2026/2026-03-01
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21385

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.