Android gets patches for Qualcomm zero-day exploited in attacks

Google released March Android security updates addressing 129 vulnerabilities, including an actively exploited zero-day (CVE-2026-21385) in a Qualcomm graphics/display component and several critical System, Framework, and Kernel flaws. Qualcomm confirmed an integer overflow in its Graphics subcomponent affecting 235 chipsets and Google noted indications of limited, targeted exploitation; patches are available though vendor rollout may lag across devices.