Memory corruption in DSP Services during a remote call from HLOS to DSP.
Information disclosure may occur while processing the hypervisor log.
There may be information disclosure during memory re-allocation in TZ Secure OS.
Transient DOS may occur while parsing SSID in action frames.
Transient DOS may occur while parsing extended IE in beacon.
memory corruption when an invalid firehose patch command is invoked.
Transient DOS while handling command data during power control processing.
Memory corruption while processing video packets received from video firmware.
Transient DOS while handling beacon frames with invalid IE header length.
Information disclosure while handling beacon or probe response frame in STA.
Memory corruption in Core Services while executing the command for removing a single event listener.
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Transient DOS in WLAN Firmware while parsing rsn ies.
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
Transient DOS while parse fils IE with length equal to 1.
Memory corruption when processing cmd parameters while parsing vdev.