cyber.hendryadrian.com
Security News · cyberscoop.com

Google’s March Android Update Fixes 129 Vulnerabilities, Including Qualcomm Zero-Day

· Original article ↗

Summary

Google's March 2026 Android update fixes 129 vulnerabilities and highlights CVE-2026-21385, a high-severity Qualcomm display-component flaw Qualcomm says may be under limited, targeted exploitation. Qualcomm says fixes were available to customers in January.

Key points

  • CVE-2026-21385 is a high-severity memory-corruption flaw in an open-source Qualcomm display component; Qualcomm says it may be under limited, targeted exploitation.
  • Qualcomm says the flaw affects 234 chipsets and fixes were made available to customers in January 2026.
  • Google's March Android security update addresses 129 vulnerabilities, its highest monthly total since April 2018.
  • The update has patch levels dated 2026-03-01 and 2026-03-05; device makers distribute customized updates on their own schedules.
  • Google said it lacked information about or access to the exploit reports; Qualcomm did not disclose when exploitation began or how many people were affected.

Article Details

Event Type
Google disclosed an actively exploited zero-day vulnerability, CVE-2026-21385, in an open-source Qualcomm display component and released its March Android security update.
Impact
The high-severity memory-corruption flaw affects 234 chipsets, according to Qualcomm, and may be under limited, targeted exploitation. Google’s March update addresses 129 Android vulnerabilities, including the zero-day. Qualcomm says fixes were made available to customers in January 2026; users depend on device makers to release customized updates.

CVE

CVE-2026-21385Qualcomm · 5g fixed wireless access platform firmware; Qualcomm · Apq8098 firmware; +235 moreGoogle disclosed an actively exploited zero-day memory-corruption vulnerability, CVE-2026-21385, in an open-source Qualcomm display component for Android devices that Qualcomm says affects 234 chipsets and may be under

Vendors

GoogleGoogle disclosed an actively exploited zero-day memory-corruption vulnerability, CVE-2026-21385, in an open-source Qualcomm display component for Android devices that Qualcomm says affects 234 chipsets and may be underQualcomman actively exploited zero-day memory-corruption vulnerability, CVE-2026-21385, in an open-source Qualcomm display component for Android devices that Qualcomm says affects 234 chipsets and may be under limited,

Products

Androidmemory-corruption vulnerability, CVE-2026-21385, in an open-source Qualcomm display component for Android devices that Qualcomm says affects 234 chipsets and may be under limited, targeted exploitation.

Related Articles