Information disclosure while handling beacon or probe response frame in STA.
Memory corruption while processing MBSSID beacon containing several subelement IE.
Information disclosure in WLAN HAL while handling command through WMI interfaces.
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
Memory corruption in Core Services while executing the command for removing a single event listener.
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
Memory corruption when processing cmd parameters while parsing vdev.
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Memory corruption in Kernel while parsing metadata.
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Transient DOS in WLAN Firmware while parsing no-inherit IES.
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
Transient DOS in WLAN Firmware while parsing rsn ies.
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.