Pandeiro Firmware vulnerabilities

3 known vulnerabilities in Pandeiro Firmware from Qualcomm. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Snapdragon: Reusing a Nonce, Key Pair in Encryption

  CVE-2026-21383Jul 6, 2026Qualcomm

  Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

• 7.8 High severity

  Snapdragon: Use After Free

  CVE-2025-59615Jul 6, 2026Qualcomm

  Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.

• 7.5 High severity

  Snapdragon: Buffer Over-read

  CVE-2026-21381Apr 6, 2026Qualcomm

  Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.