Google Confirms CVE-2026-21385 in Qualcomm Android Component Exploited

Google and Qualcomm disclosed CVE-2026-21385, a high-severity (CVSS 7.8) buffer over-read/integer overflow in a Qualcomm graphics component used on Android devices; vendors released March 2026 patches and Google indicated there are signs of limited, targeted exploitation in the wild, though no public technical details or indicators of compromise have been published.