CVE-2026-21385
7.8 highKEVEPSS 1.3%
High (7.8) in Qualcomm Multiple Chipsets. In CISA KEV since 2026-03-03. EPSS 1.3% chance of exploitation in the next 30 days.
Memory corruption while using alignments for memory allocation.
Severity
CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2026-03-03, due 2026-03-24
- CWE
- CWE-190
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:5g_fixed_wireless_access_platform_firmware
- qualcomm:apq8098_firmware
- qualcomm:ar8031_firmware
- qualcomm:ar8035_firmware
- qualcomm:c-v2x_9150_firmware
- qualcomm:csra6620_firmware
- qualcomm:csra6640_firmware
- qualcomm:fastconnect_6200_firmware
- qualcomm:fastconnect_6700_firmware
- qualcomm:fastconnect_6800_firmware
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:flight_rb5_5g_platform_firmware
- qualcomm:fsm100_platform_firmware
- qualcomm:g1_gen_1_firmware
- qualcomm:g2_gen_1_firmware
- qualcomm:iq-615_firmware
- qualcomm:iq-8275_firmware
- qualcomm:iq-8300_firmware
- qualcomm:iq-9075_firmware
- qualcomm:iq-9100_firmware
- qualcomm:lemans_au_lgit_firmware
- qualcomm:lemansau_firmware
- qualcomm:mdm9250_firmware
- qualcomm:mdm9628_firmware
- qualcomm:milos_firmware
- qualcomm:monaco_iot_firmware
- qualcomm:netrani_firmware
- qualcomm:orne_firmware
- qualcomm:palawan25_firmware
- qualcomm:pandeiro_firmware
- qualcomm:qam8255p_firmware
- qualcomm:qam8295p_firmware
- qualcomm:qamsrv1h_firmware
- qualcomm:qamsrv1m_firmware
- qualcomm:qca2066_firmware
- qualcomm:qca6174a_firmware
- qualcomm:qca6391_firmware
- qualcomm:qca6564a_firmware
- qualcomm:qca6564au_firmware
- qualcomm:qca6574_firmware
- qualcomm:qca6574a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6584au_firmware
- qualcomm:qca6595_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6678aq_firmware
- qualcomm:qca6688aq_firmware
- qualcomm:qca6696_firmware
- qualcomm:qca6698aq_firmware
References
Check your stackJSON