Memory corruption in Hypervisor when platform information mentioned is not aligned.
Information disclosure in Video while parsing mp2 clip with invalid section length.
Memory corruption while processing MBSSID beacon containing several subelement IE.
Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.
Memory corruption in Core Services while executing the command for removing a single event listener.
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
Memory corruption while parsing qcp clip with invalid chunk data size.
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
Memory Corruption in Audio while allocating the ion buffer during the music playback.
Memory corruption while parsing the ADSP response command.
Memory corruption while processing manipulated payload in video firmware.
Memory Corruption in Core during syscall for Sectools Fuse comparison feature.
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.