CVE-2026-21385

Integer Overflow or Wraparound in Graphics

State: Published
Severity: 7.8 High
Published: Mar 2, 2026
Updated: Mar 4, 2026
Reserved: Dec 17, 2025

Description

Memory corruption while using alignments for memory allocation.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-190 Integer Overflow or Wraparound

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	5G Fixed Wireless Access PlatformAffected APQ8098Affected AR8031Affected AR8035Affected C-V2X 9150Affected CSRA6620Affected CSRA6640Affected FastConnect 6200Affected FastConnect 6700Affected FastConnect 6800Affected FastConnect 6900Affected FastConnect 7800Affected Flight RB5 5G PlatformAffected FSM100 PlatformAffected G1 Gen 1Affected G2 Gen 1Affected IQ6 Series PlatformAffected IQ8 Series PlatformAffected IQ9 Series PlatformAffected LeMans_AU_LGITAffected LeMansAUAffected MDM9250Affected MDM9628Affected MilosAffected Monaco_IOTAffected and 210 more versions

Product

Versions

SnapdragonQualcomm, Inc.

5G Fixed Wireless Access PlatformAffected
APQ8098Affected
AR8031Affected
AR8035Affected
C-V2X 9150Affected
CSRA6620Affected
CSRA6640Affected
FastConnect 6200Affected
FastConnect 6700Affected
FastConnect 6800Affected
FastConnect 6900Affected
FastConnect 7800Affected
Flight RB5 5G PlatformAffected
FSM100 PlatformAffected
G1 Gen 1Affected
G2 Gen 1Affected
IQ6 Series PlatformAffected
IQ8 Series PlatformAffected
IQ9 Series PlatformAffected
LeMans_AU_LGITAffected
LeMansAUAffected
MDM9250Affected
MDM9628Affected
MilosAffected
Monaco_IOTAffected
and 210 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.