Qualcomm Zero-Day Exploited in Targeted Android Attacks

By Alexander Culafi

AI Summary

Google patched CVE-2026-21385, a high-severity memory corruption flaw in Qualcomm's graphics component that has been actively exploited in targeted Android attacks. The vulnerability allows buffer over-read when adding user data without checking available buffer space, with exploitation potentially linked to commercial spyware or nation-state groups.

Read full article → https://www.darkreading.com/threat-intelligence/qu…

Relevance score: 92.0/100

# More from March 04

1
CISA flags VMware Aria Operations RCE flaw as exploited in attacks BleepingComputer
3
Iranian Strikes on Amazon Data Centers Highlight Industry’s Vulnerability to Physical Disasters SecurityWeek
4
Paint maker giant AkzoNobel confirms cyberattack on U.S. site BleepingComputer
5
Dark Reading Confidential: This Threat Hunter Helped Cops Bust Up An African Cybercrime Syndicate Dark Reading
6
Possible U.S.-developed exploits linked to first known ‘mass’ iOS attack CyberScoop
7
LexisNexis confirms data breach as hackers leak stolen files BleepingComputer
8
Microsoft: Hackers abuse OAuth error flows to spread malware BleepingComputer
9
Quantum Decryption of RSA is Much Closer than Expected SecurityWeek
10
Researchers discover suite of agentic AI browser vulnerabilities CyberScoop