Android Qualcomm Display Component Zero-Day Actively Exploited in the Wild

Google's March Android security bulletin patched an actively exploited zero-day in a Qualcomm display component, the third weaponized Chrome/Android zero-day since January. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog. The steady cadence of exploited mobile zero-days indicates sustained targeting of mobile platforms, likely by commercial spyware vendors or state-sponsored actors.