CISA Warns Qualcomm Chipsets Memory Corruption Vulnerability Is Actively Exploited in Attacks

CISA added CVE-2026-21385 — a critical integer-overflow memory-corruption flaw in multiple Qualcomm chipsets — to its Known Exploited Vulnerabilities catalog on March 3, 2026, confirming active exploitation; the vulnerability can lead to memory corruption enabling remote code execution and privilege escalation across widely deployed mobile, embedded, and IoT devices, and CISA requires remediation by March 24, 2026 with guidance to apply vendor patches or discontinue affected products.