Google has patched 129 vulnerabilities in Android through its March 2026 security bulletin, including a high-severity flaw affecting devices powered by Qualcomm chips.
The vulnerability, tracked as CVE-2026-21385, targets a graphics and display component used in many Qualcomm chipsets.
Security researchers say it is already being exploited in limited, targeted attacks.
The bug involves memory corruption within the graphics driver.
Attackers could exploit it to escalate privileges or bypass security protections once malicious code is running on a device.
Qualcomm chipsets power hundreds of millions of Android phones worldwide, including models using Snapdragon processors.
However, the flaw requires attackers to gain a local foothold first, typically by tricking users into installing a malicious application.
Google says devices with a security patch level dated 5th March 2026 or later are protected from the issue.
Users should install apps only from trusted stores, review permissions carefully, and keep Android and Google Play services fully updated to reduce risk.
