Memory corruption while performing finish HMAC operation when context is freed by keymaster.
Information disclosure while handling SA query action frame.
INformation disclosure while handling Multi-link IE in beacon frame.
Information Disclosure while parsing beacon frame in STA.
Transient DOS in WLAN Firmware while processing a FTMR frame.
Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.
Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE.
Transient DOS in WLAN Firmware while parsing t2lm buffers.
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.
Memory corruption while receiving a message in Bus Socket Transport Server.
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.
Memory corruption in Graphics while processing user packets for command submission.
Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.
Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).
Memory corruption in core services when Diag handler receives a command to configure event listeners.