Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
Memory corruption in Core Services while executing the command for removing a single event listener.
Transient DOS in WLAN Firmware while parsing no-inherit IES.
Memory corruption during management frame processing due to mismatch in T2LM info element.
Transient DOS in WLAN Firmware while parsing a NAN management frame.
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
Memory corruption in Kernel while parsing metadata.
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
Transient DOS in WLAN Firmware while parsing a BTM request.
Memory corruption while processing manipulated payload in video firmware.