Use After Free in WLAN Host Communication
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
Transient DOS while parsing BTM ML IE when per STA profile is not included.
Transient DOS while processing the CU information from RNR IE.
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
Memory corruption while processing voice packet with arbitrary data received from ADSP.
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
Memory corruption while handling session errors from firmware.
Information disclosure while sending implicit broadcast containing APP launch information.