Qualcomm Display Zero-Day Actively Exploited (CVE-2026-21385)

Google disclosed a memory‑corruption zero‑day (CVE‑2026‑21385) in an open‑source Qualcomm display component affecting 234 chipsets; Google marked it as actively exploited. Qualcomm issued fixes to OEMs in January — apply device OEM February 2026 Android security updates immediately.

Part of the PlainSec briefing for 2026-03-07

Sources

• CyberScoop
• BleepingComputer
• Help Net Security
• The Hacker News
• SecurityWeek
• Dark Reading