Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Transient DOS while processing 11AZ RTT management action frame received through OTA.
Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.
Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
Memory corruption while redirecting log file to any file location with any file name.
Memory corruption while processing TPC target power table in FTM TPC.
Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.
Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
Memory corruption in WLAN Host while processing RRM beacon on the AP.
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
Information disclosure while handling beacon probe frame during scan entry generation in client side.