CVE-2026-21385: high-severity vulnerability in Qualcomm, Inc. Snapdragon
Integer Overflow or Wraparound in Graphics
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
A flaw in how graphics memory is allocated can cause it to overflow, corrupting data in memory. This can lead to crashes or allow attackers to execute malicious code.
Integer overflow in memory alignment calculations during graphics buffer allocation allows heap corruption. Attack vector requires processing specially crafted graphical input; impact includes code execution or denial of service depending on memory layout and application context.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.