Qualcomm GPU Driver Memory Corruption Vulnerability in Android Devices

2026.03.14
Credit: RERO(tr)
Risk: High
Local: No
Remote: Yes
CWE: CWE-787

A memory corruption vulnerability has been identified in Qualcomm GPU drivers used in a wide range of Android devices. The vulnerability, tracked as CVE-2026-21385, affects components responsible for GPU memory management and rendering operations. The issue originates from improper bounds validation when processing specific GPU commands or memory operations. An attacker may craft a malicious application or exploit a vulnerable interface to trigger an out-of-bounds write condition within the GPU driver. Successful exploitation of this vulnerability may allow an attacker to corrupt memory structures in kernel space, potentially leading to privilege escalation, system instability, or arbitrary code execution with elevated privileges. In real-world attack scenarios, this vulnerability could be leveraged as part of a chained exploit to escape application sandbox restrictions and gain deeper system access. Due to the privileged context of GPU drivers within the Android kernel, exploitation may compromise the confidentiality, integrity, and availability of the affected device. Devices using vulnerable Qualcomm GPU driver implementations may be impacted until security patches provided by vendors are applied. Users are strongly advised to install the latest Android security updates released by device manufacturers. The vulnerability has been addressed in recent security patches distributed through Android security bulletins and Qualcomm security advisories.

References:

https://cve.mitre.org
https://source.android.com/security
https://www.qualcomm.com/security
CVE-2026-21385


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2026, cxsecurity.com

 

Back to Top