Memory Corruption in Qualcomm Graphics/Display Component

CVE-2026-21385 is a high-severity vulnerability affecting an open-source Qualcomm Graphics/Display component used across multiple Qualcomm chipsets in Android devices. Qualcomm describes the issue as "memory corruption while using alignments for memory allocation," and multiple sources in the provided content characterize it as an integer overflow or wraparound condition in alignment or size calculations during memory allocation. The resulting corruption has also been described as a buffer over-read in the Graphics component, indicating that malformed or unexpected size/alignment handling can cause out-of-bounds memory access. Google included fixes for the issue in the March 2026 Android Security Bulletin and stated there were indications of limited, targeted exploitation in the wild. The flaw reportedly affects a large number of Qualcomm chipsets used in phones, tablets, and some IoT/embedded devices.