Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Transient DOS in WLAN Firmware while parsing a BTM request.
Memory corruption in Core while processing control functions.
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
Memory corruption during management frame processing due to mismatch in T2LM info element.
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Information disclosure in IOE Firmware while handling WMI command.
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
Transient DOS in WLAN Firmware while parsing no-inherit IES.
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Information disclosure in WLAN HAL while handling command through WMI interfaces.
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
Information disclosure while handling T2LM Action Frame in WLAN Host.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.