CVE-2026-21385: Qualcomm Multiple Chipsets Memory Corruption Vulnerability

High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-03-03. EPSS: 1.3% chance of exploitation in the next 30 days.

Memory corruption while using alignments for memory allocation.

Affected products

• Qualcomm 5g Fixed Wireless Access Platform Firmware: affected versions not specified
• Qualcomm APQ8098 Firmware: affected versions not specified
• Qualcomm AR8031 Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm C-v2x 9150 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm Flight RB5 5g Platform Firmware: affected versions not specified
• Qualcomm FSM100 Platform Firmware: affected versions not specified
• Qualcomm g1 Gen 1 Firmware: affected versions not specified
• Qualcomm g2 Gen 1 Firmware: affected versions not specified
• Qualcomm Iq-615 Firmware: affected versions not specified
• Qualcomm Iq-8275 Firmware: affected versions not specified
• Qualcomm Iq-8300 Firmware: affected versions not specified
• Qualcomm Iq-9075 Firmware: affected versions not specified
• Qualcomm Iq-9100 Firmware: affected versions not specified
• Qualcomm Lemans Au Lgit Firmware: affected versions not specified
• Qualcomm Lemansau Firmware: affected versions not specified
• Qualcomm MDM9250 Firmware: affected versions not specified
• Qualcomm MDM9628 Firmware: affected versions not specified
• and 212 more

Published 2026-03-02. Last modified 2026-06-17.