Transient DOS while processing a frame with malformed shared-key descriptor.
Information disclosure may be there when a guest VM is connected.
Information disclosure while processing a packet at EAVB BE side with invalid header length.
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.
Memory corruption during management frame processing due to mismatch in T2LM info element.
Memory corruption while operating the mailbox in Automotive.
Memory corruption during concurrent access to server info object due to unprotected critical field.
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
Transient DOS may occur while processing the country IE.
Information disclosure while deriving keys for a session for any Widevine use case.
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
Cryptographic issue occurs due to use of insecure connection method while downloading.
Transient DOS while parsing per STA profile in ML IE.
Memory corruption while processing IOCTL call for getting group info.
Memory corruption while processing manipulated payload in video firmware.
Memory corruption while processing data packets in diag received from Unix clients.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.