Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
Memory corruption when processing cmd parameters while parsing vdev.
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
Transient DOS while parse fils IE with length equal to 1.
Information disclosure in IOE Firmware while handling WMI command.
Information disclosure in WLAN HAL while handling the WMI state info command.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Transient DOS while processing received beacon frame.
Memory corruption while using the UIM diag command to get the operators name.
Memory corruption while processing finish_sign command to pass a rsp buffer.
Memory corruption in Core Services while executing the command for removing a single event listener.
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
Information disclosure while deriving keys for a session for any Widevine use case.
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
Information disclosure in WLAN HAL while handling command through WMI interfaces.