Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Information disclosure while handling SA query action frame.
INformation disclosure while handling Multi-link IE in beacon frame.
Information Disclosure while parsing beacon frame in STA.
Transient DOS in WLAN Firmware while processing a FTMR frame.
Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.
Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE.
Transient DOS in WLAN Firmware while parsing t2lm buffers.
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.
Memory corruption in core services when Diag handler receives a command to configure event listeners.
Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.
Transient DOS in WLAN Firmware while processing frames with missing header fields.
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.
Memoru corruption in Audio when ADSP sends input during record use case.
Memory corruption in WLAN HOST while receiving an WMI event from firmware.
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.