CVE-2026-21385
high · 7.8Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Added 2026-03-03Remediation due 2026-03-24
Memory corruption while using alignments for memory allocation.
7.8
CVSS
1.3%
EPSS (exploit prob.)
69th
EPSS percentile
2026-03-02
Published
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-190
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| qualcomm | sm7675p_firmware | all versions |
| qualcomm | sm7675p | all versions |
| qualcomm | sm8475p_firmware | all versions |
| qualcomm | sm8475p | all versions |
| qualcomm | sm8550p_firmware | all versions |
| qualcomm | sm8550p | all versions |
| qualcomm | sm8635_firmware | all versions |
| qualcomm | sm8635 | all versions |
| qualcomm | sm8635p_firmware | all versions |
| qualcomm | sm8635p | all versions |
| qualcomm | sm8650q_firmware | all versions |
| qualcomm | sm8650q | all versions |
| qualcomm | sm8750p_firmware | all versions |
| qualcomm | sm8750p | all versions |
| qualcomm | smart_audio_400_platform_firmware | all versions |
| qualcomm | smart_audio_400_platform | all versions |
| qualcomm | smart_display_200_platform_firmware | all versions |
| qualcomm | smart_display_200_platform | all versions |
| qualcomm | snapdragon_4_gen_1_mobile_platform_firmware | all versions |
| qualcomm | snapdragon_4_gen_1_mobile_platform | all versions |
| qualcomm | snapdragon_4_gen_2_mobile_platform_firmware | all versions |
| qualcomm | snapdragon_4_gen_2_mobile_platform | all versions |
| qualcomm | snapdragon_429_mobile_platform_firmware | all versions |
| qualcomm | snapdragon_429_mobile_platform | all versions |
| qualcomm | snapdragon_460_mobile_platform_firmware | all versions |
| qualcomm | snapdragon_460_mobile_platform | all versions |
| qualcomm | snapdragon_480+_5g_mobile_platform_firmware | all versions |
| qualcomm | snapdragon_480+_5g_mobile_platform | all versions |
| qualcomm | snapdragon_480_5g_mobile_platform_firmware | all versions |
| qualcomm | snapdragon_480_5g_mobile_platform | all versions |
| qualcomm | snapdragon_6_gen_1_mobile_platform_firmware | all versions |
| qualcomm | snapdragon_6_gen_1_mobile_platform | all versions |
| qualcomm | snapdragon_6_gen_3_mobile_platform_firmware | all versions |
| qualcomm | snapdragon_6_gen_3_mobile_platform | all versions |
| qualcomm | snapdragon_6_gen_4_mobile_platform_firmware | all versions |
| qualcomm | snapdragon_6_gen_4_mobile_platform | all versions |
| qualcomm | snapdragon_625_mobile_platform_firmware | all versions |
| qualcomm | snapdragon_625_mobile_platform | all versions |
| qualcomm | snapdragon_626_mobile_platform_firmware | all versions |
| qualcomm | snapdragon_626_mobile_platform | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2026-21385