Transient DOS while processing CCCH data when NW sends data with invalid length.
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
Memory corruption while processing MBSSID beacon containing several subelement IE.
Memory corruption while invoking HGSL IOCTL context create.
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
Transient DOS in Bluetooth Host while rfc slot allocation.
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Transient DOS may occur while processing the country IE.
Memory corruption in Audio while processing RT proxy port register driver.
Memory corruption in Core Services while executing the command for removing a single event listener.
Memory corruption while operating the mailbox in Automotive.
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
Memory corruption in DSP Service during a remote call from HLOS to DSP.