The first entry is always the pin's source. Overall confidence is a weighted average of how firmly each reference supports the start and end times used above; a reference counts half as much for every 180 days older than the newest.
Android's[5] March 2026 bulletin is 'Published March 2, 2026' and says 'There are indications that CVE-2026-21385 may be under limited, targeted exploitation'; SecurityWeek[4] says Qualcomm 'disclosed the security defect on Monday'.
Explains that an attacker needs a local foothold such as a malicious app, and that phones at patch level 2026-03-05 or later are fixed.[1]
'Qualcomm[1] Multiple Chipsets Memory Corruption Vulnerability', added 3 March 2026 with a 24 March 2026 due date.
CVSS 7.8 integer overflow or wraparound in the graphics component of over 200 Qualcomm[1] chipsets, leading to memory corruption while using alignments for memory allocation.
Google's bulletin, published 2 March 2026: 'There are indications that CVE-2026-21385 may be under limited, targeted exploitation'; a High-severity Qualcomm[1] Display issue (QC-CR#4387106), fixed at the 2026-03-05 patch level.
Something missing or wrong? Say it in your own words: a link that backs this pin up, a different start or end date and why, or a fact it lacks or gets wrong. The AI checks it against this pin's sources, searches for better ones, and adds any page that backs you up. The pin's own sources still count most. A picture that shows something else, or shows it badly, is looked at too, and moved down or replaced.
